Official Legal & Compliance Policy

Privacy Policy (GDPR, CCPA & Google AdX Compliant)

Effective Date: January 1, 2026 • Last Updated: October 19, 2026

Welcome to Da Nang Feast and our affiliated digital storytelling publications (collectively referred to as "we," "us," or "our"). Protecting the privacy and personal data of our readers is a foundational priority of our publishing operations. This comprehensive Privacy Policy explains how we collect, process, store, and safeguard your information when you visit our main culinary magazine domain and any of our official subdomains, in strict accordance with the European Union General Data Protection Regulation (GDPR), the UK Data Protection Act, the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), and Google Publisher Policies.

1. Information We Collect Automatically (Log Data & Telemetry)

When you access our articles, recipes, or serialized stories, our servers and authorized content delivery networks (such as Cloudflare) automatically record standard technical metadata transmitted by your web browser. This log data may include your Internet Protocol (IP) address, browser type and version, device operating system, screen resolution, timezone setting, referring/exit pages, date and time stamps of your requests, and clickstream interaction patterns.

We use this technical telemetry solely to maintain server stability, prevent automated bot attacks or Invalid Traffic (IVT), diagnose technical errors, and analyze aggregate readership trends across geographic regions including the United States, United Kingdom, Canada, Australia, and the European Economic Area.

2. Programmatic Advertising, Google AdX & MaxValue Media Header Bidding

To keep our culinary guides and literary stories free for all readers worldwide, our website displays programmatic advertisements managed through Google Ad Manager (Google AdX), MaxValue Media, and authorized Supply-Side Platforms (SSPs) publicly declared in our root /ads.txt file (including PubMatic, Magnite/Rubicon, Index Exchange, OpenX, and Xandr/AppNexus).

  • Third-Party Advertising Cookies: Third-party vendors, including Google, use cookies, web beacons, and mobile advertising identifiers to serve ads based on a user's prior visits to this website or other websites on the internet.
  • Google Advertising Cookies: Google's use of advertising cookies enables it and its partners to serve personalized or contextual advertisements to our visitors. Users may opt out of personalized advertising at any time by visiting Google Ads Settings or How Google uses information from sites or apps that use our services.
  • Industry Opt-Out Portals: You may also manage or opt out of interest-based advertising from participating programmatic networks via the Network Advertising Initiative (NAI Opt-Out), the Digital Advertising Alliance (DAA WebChoices), or the European Interactive Digital Advertising Alliance (YourOnlineChoices).

3. IAB Europe Transparency & Consent Framework (TCF v2.2)

For visitors accessing our website from the European Economic Area (EEA), the United Kingdom, or Switzerland, we support Consent Management Platforms (CMP) compliant with the IAB Europe Transparency and Consent Framework (TCF v2.2). You may review, grant, or withdraw your consent for specific data processing purposes and vendor legitimate interests at any time through the privacy consent icon displayed on our pages.

4. Google Analytics 4 (GA4) Measurement

We utilize Google Analytics 4 (GA4) with IP anonymization enabled to measure aggregate website traffic, pageviews, reading duration, and user engagement. Google Analytics collects first-party cookies to generate statistical reports without personally identifying individual visitors. You can prevent your data from being used by Google Analytics by installing the official Google Analytics Opt-out Browser Add-on.

5. Your Statutory Rights Under GDPR (EEA/UK)

If you reside in the European Economic Area or the United Kingdom, you possess the following legal rights under Articles 15–22 of the GDPR:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
  • Right to Restrict Processing & Object: Object to processing based on legitimate interests or direct marketing.
  • Right to Data Portability: Receive your provided data in a structured, machine-readable format.

6. California Privacy Rights (CCPA / CPRA Notice at Collection)

Under the California Consumer Privacy Act (as amended by the CPRA), California residents have the right to know what categories of personal information are collected, the right to request deletion of personal information, and the right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell personal contact lists for monetary consideration; however, the use of third-party programmatic advertising cookies may be classified as "sharing" under California law. To exercise your "Do Not Sell or Share My Personal Information" right, please contact us using the email below.

7. Children's Online Privacy Protection (COPPA)

Our website and subdomains are intended for general adult audiences aged 18 and older. We do not knowingly collect, solicit, or store personal information from children under the age of 13 (or under 16 in the EEA). If we learn that we have inadvertently collected personal data from a minor, we will delete that information immediately.

8. Data Security & Contact Information

We implement industry-standard HTTPS/TLS encryption, Cloudflare Web Application Firewall (WAF) protection, and strict access controls to safeguard our infrastructure. For any privacy inquiries or data subject requests, please contact our Data Protection Officer at [email protected].