Privacy Policy
Last updated: September 15, 2026.
Vibistic Passport (passport.vibistic.com) is an independent information service. This page explains what data it collects, what it doesn't, and the choices you have.
There's no account, and nothing is sold or shared
You don't sign up or log in to use this site. We don't sell or share your data with anyone, including advertisers or data brokers, and there's no advertising of any kind. This site does show one small, anonymous visitor counter, see below for exactly what that collects.
The visitor counter
This site shows a small counter with two numbers: how many people have ever visited it, and how many are on it right now. To count a visit only once per visitor rather than once per page view, the counter (a separate, shared Vibistic service at vibistic.com, not this app's own server) computes a one-way cryptographic hash of your IP address and browser's user-agent string, combined with a secret value only that service knows. That hash (never your raw IP address) is what gets stored, alongside which app it belongs to and when it was first seen.
This hash is a pseudonymous technical identifier, not an anonymous one in the strictest sense, and we want to be precise rather than say "no data is collected" when that wouldn't be accurate. It cannot be reversed back into your IP address or user-agent without that secret value, it's never linked to any account (there are none) or to anything you do on this checklist, and it's used for nothing beyond this aggregate count. No cookie is set for this feature, and it's unrelated to the cookies described below.
This is a best-effort, decorative counter, not a precise analytics platform: the same person can be counted more than once (a change in network or device looks like a new visitor), and multiple people sharing one network connection can be undercounted.
Cookies
This site uses cookies to remember your consent choice, so we don't ask again on your next visit. If you accept, it also remembers your progress through a checklist between visits, entirely on your own device, never sent anywhere but back to this site. SeeCookie settings to change your choice at any time.
| Cookie | Purpose |
|---|---|
cookie_consent | Your accept/decline choice itself. |
consent_mirror | The same accept/decline value, in a second, non-technical copy so the page can read it without an extra round-trip to the server. |
travelers | If you're tracking more than one person's checklist ("Me," "Traveler 2," and so on): which travelers you've added and which one is currently active. No names are ever typed in or stored, only auto-assigned labels. |
checklist_progress | Which checklist steps you've checked off, per traveler. |
document_progress | Which document requirements you've marked ready or not-applicable, per traveler. |
That's everything tied to your consent choice. None of these cookies are used for advertising or cross-site tracking, and none identify you personally: the three progress cookies above are only ever set if you've accepted, are read and written directly by this site's own page code (never sent to any third party), and are cleared immediately if you decline or change your mind atCookie settings. All five last up to a year, matchingcookie_consent's own lifetime; consent_mirror is occasionally reset with a one-day lifetime as an internal technical safeguard, self-correcting on your next visit.Cookie settings lets you change accept/decline at any time, but doesn't erase the record of having made a choice (that's the point: so we don't ask again). To actually remove these cookies, clear them in your browser.
Theme preference
Clicking the light/dark/system icon in the header saves your choice in a small cookie namedvibistic-theme. It's separate from the accept/decline choice above and isn't gated by it: it stores only which of those three you picked, nothing else, is set only when you click the icon yourself (or once, automatically, to carry an existing preference forward from an earlier version of this feature), and is shared across every Vibistic subdomain (learn., classroom., circuits., visa., passport., and vibistic.com itself), so your choice looks the same everywhere in the portfolio rather than resetting each time you move between apps. It's never used for tracking or analytics, and never linked to anything else you do here.
What we don't collect
- No name, email address, or account of any kind.
- No IP address is logged or stored by this app. On rate-limited routes (the public API, the search homepage, the country/service checklist page, and the most-requested-countries page, some rate-limited as a whole even on a visit that doesn't touch the database) the app reads your IP only to check it against a request limit (so one visitor can't overload the site); it's never written to a log or a database.
- No third-party analytics, advertising pixels, or tracking scripts of any kind. This app's own server doesn't compute or store the visitor-counter hash described above: that happens entirely on the separate Vibistic service that owns it.
Searching for a country we don't support yet may contribute to an aggregate daily count for that country (a rough, throttled tally of interest, not a record of your individual search; a burst of searches for the same country close together counts as one). If you go on to use the "Request this country" form, we additionally store the matched country name/slug and when it was requested. Neither path ever stores your IP address, a cookie, a session id, or any free text: the request form has no free-text field at all, so there's nothing here that could end up holding something you didn't intend to share.
Where data is stored
This site runs on Cloudflare's infrastructure (Workers and a D1 database). The content served (passport criteria, steps, and document requirements) comes from official government sources and is public information, not personal data.
Changes to this policy
If what this site collects or how it's used ever changes, this page will be updated to reflect it: the "Last updated" date above always reflects the current, real practice, not a static document that drifts out of sync with the code.