Privacy & Cookie Policy
New York Pass Comparison ("we," "us," or "our") operates passcomparison.com to help travelers compare New York City sightseeing passes and attraction gate ticket prices. This Privacy & Cookie Policy explains what personal data is collected, how cookies and Google services (including Google Analytics and Google AdSense) operate, our lawful bases under the EU General Data Protection Regulation (EU GDPR), the UK GDPR, and the ePrivacy Directive, and how you can exercise your privacy rights.
1. Data Controller & Contact Details
The operator of passcomparison.com is the data controller responsible for personal data processed through this website. For privacy inquiries, data subject requests, or consent questions, contact us at [email protected].
2. Personal Data We Collect & How We Use It
- Sightseeing Calculator Inputs (Transient Processing): When you select sightseeing days, traveler ages, or New York attractions, those inputs are transmitted to our calculation API solely to compute pass and ticket prices in real time. We do not require account registration and do not store personal profiles linking your itinerary inputs to your identity.
- Server & Security Logs: Our web hosting infrastructure automatically logs standard HTTP request metadata—including IP address, browser user-agent, referring page, requested URL, and timestamp—to deliver pages, defend against automated abuse or denial-of-service traffic, and diagnose technical errors.
- Analytics & Advertising Identifiers (Subject to Consent): Where you grant consent via our cookie consent controls, analytics and advertising partners collect pseudonymous identifiers, cookie IDs, device attributes, approximate geolocation (country/city level), and page interaction events.
3. Lawful Bases for Processing (EU GDPR & UK GDPR)
| Processing Activity | Data Involved | Lawful Basis (GDPR Art. 6) |
|---|---|---|
| Running the NYC pass & ticket price comparison calculator | Trip days, traveler ages, selected attraction IDs | Legitimate Interests (Art. 6(1)(f)) — fulfilling the user-requested calculation |
| Hosting security, rate limiting & fault diagnostics | IP address, HTTP headers, request timestamps | Legitimate Interests (Art. 6(1)(f)) — protecting service availability and preventing abuse |
| Audience measurement (Google Analytics) | Cookie identifiers, page views, device/browser telemetry | Consent (Art. 6(1)(a)) — activated only after opt-in in the EEA, UK & Switzerland |
| Contextual & personalized advertising (Google AdSense) | Advertising cookies, pseudonymous IDs, ad interaction data | Consent (Art. 6(1)(a)) — activated only after opt-in in the EEA, UK & Switzerland |
4. Cookies, Consent Management & Google EU User Consent Policy
In accordance with the EU ePrivacy Directive, UK PECR, and Google's EU User Consent Policy, we do not place non-essential analytics or advertising cookies on your device until you make an explicit choice through our Consent Management Platform (CMP) banner.
- Google Consent Mode Signals: Your consent preferences are communicated to Google tags using Google Consent Mode signals (
ad_storage,analytics_storage,ad_user_data, andad_personalization). If you decline consent, Google tags operate in restricted cookieless mode without storing advertising or analytics cookies. - Withdrawing or Changing Consent: You may withdraw or modify your cookie preferences at any time by clearing cookies for passcomparison.com in your browser settings (which re-triggers the consent banner on your next visit) or using your browser's site-data controls.
5. Google Analytics & Google AdSense Disclosures
This website uses third-party services provided by Google Ireland Limited (for users in the EEA and Switzerland) and Google LLC (for users in the UK and rest of the world):
- Google Analytics: Helps us measure aggregated visitor traffic, popular pages, and device compatibility. IP anonymization is enabled by default in Google Analytics 4.
- Google AdSense & Certified Ad Vendors: Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites on the internet. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to passcomparison.com and/or other sites on the Internet.
Learn how Google collects, shares, and processes data when you visit partner websites by reviewing Google's official privacy disclosure: https://policies.google.com/technologies/partner-sites.
Opting Out of Personalized Advertising:
- Manage or turn off personalized Google ads via Google My Ad Center.
- Opt out of third-party vendor cookies for personalized advertising in Europe via Your Online Choices (EDAA) or globally via www.aboutads.info.
6. Outbound Affiliate & Attraction Booking Links
Comparison results include outbound links to official New York City attraction websites and sightseeing pass providers (such as The New York Pass, Go City, and CityPASS). Some outbound links are affiliate links from which we may earn a referral commission at no additional cost to you. When you click an outbound link, you leave passcomparison.com, and any data collected on the destination website is governed by that provider's own privacy policy.
7. International Data Transfers
Our hosting servers and third-party providers (including Google) may process data outside the European Economic Area (EEA) and the United Kingdom, including in the United States. Where personal data is transferred outside the EEA or UK, such transfers are safeguarded by the EU–US Data Privacy Framework, the UK–US Data Bridge, or European Commission / UK-approved Standard Contractual Clauses (SCCs).
8. Data Retention
- Calculator Inputs: Processed in memory during the HTTP request and discarded immediately after the response is returned.
- Server Access & Security Logs: Retained for up to 30 days for security monitoring and troubleshooting, then automatically rotated and deleted.
- Analytics & Advertising Data: Retained according to your consent settings and Google Analytics retention controls (set to 14 months or less).
9. Your Rights Under EU GDPR & UK GDPR
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following statutory rights regarding your personal data:
- Right of Access (Art. 15): Request confirmation of whether we process your personal data and obtain a copy of it.
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
- Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal data where there is no overriding legal reason to retain it.
- Right to Restriction of Processing (Art. 18): Request that we limit how we process your personal data in specific circumstances.
- Right to Data Portability (Art. 20): Receive personal data you provided to us in a structured, machine-readable format.
- Right to Object (Art. 21): Object at any time to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local EU Data Protection Supervisory Authority or, in the United Kingdom, the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, email [email protected]. We respond to verified requests within one month in accordance with GDPR timelines.
10. Children's Privacy
While our calculator allows trip planners to enter traveler ages to compute child admission pricing, this website is directed at adults planning travel. We do not knowingly collect personal data from children under 16 years of age in the EEA (or under 13 in the UK and United States).
11. Changes to This Policy
We may update this Privacy & Cookie Policy to reflect updates to Google policies, legal requirements, or site features. Any revisions will appear on this page with an updated effective date at the top.