Privacy
Updated 23 September 2026
Who runs this site
MELB.EST is an independent Melbourne discovery project. Contact us using the privacy request form below.
Email accounts and newsletter collection are currently disabled. You can explore the site and use a browser passport without providing an email address.
What we collect and why
- Saved places and self-reported visits, to provide your passport.
- A random browser identifier in an essential cookie, to reconnect this browser with those records. It is pseudonymous, not a guarantee of anonymity.
- Corrections, source links and privacy requests you submit, to review facts and address your requests.
- Our hosting providers receive technical request information such as IP addresses, browser details and operational logs to deliver and secure the site.
We do not add advertising trackers, sell personal information, request GPS access or publish individual passport histories. An export or score you choose to share is under your control.
Cookies and outside services
The browser passport cookie lasts up to a year. Clearing it or switching browsers can disconnect you from an unsigned passport. We do not set advertising cookies.
OpenAI Sites hosts this website using Cloudflare infrastructure and a database. Hosting and support processing can occur outside Australia; Australian-only storage is not promised. Photos load from Wikimedia servers, which receive the network request. Links to maps, venues and sources take you to services with their own privacy practices.
OpenAI privacy policy · Cloudflare privacy policy · Wikimedia privacy policy
Retention and security
Passport data stays in the application until you delete it or we remove it during a retention review. Expiry of a cookie does not itself delete server records. Export or delete before clearing your cookies if you want to manage that data. Corrections and privacy requests are retained for review and follow-up, unless deleted through the controls below.
We restrict application data to the site operator and the services needed to run it. Transport uses HTTPS on the live site. Database queries use bound parameters and forms validate input. No system is risk-free. A confirmed deletion removes application records; provider logs and backups follow the provider’s retention and security processes.
Access, correction and complaints
Use the controls below to export, delete or request a correction to data connected with this browser or signed-in account. If you lose access to an unsigned browser passport, we may be unable to identify it safely. Avoid including personal information about other people in submissions.
Privacy requests are reviewed by the operator. Where identity verification is needed, we will seek only what is reasonably necessary. We aim to address complaints within 30 days. If an Australian privacy complaint remains unresolved, the OAIC explains when it can help. Its jurisdiction depends on the circumstances.
Material changes to how the site uses data will be reflected here. Newsletter consent remains separate from passport use. Manage newsletter subscriptions.
Your data
Export or delete the data connected to this browser or signed-in account. Deletion also removes associated corrections and privacy requests. A newsletter-only subscription is managed separately on the newsletter page.
Contact us about privacy
Send a request or complaint here. You do not need to provide an email address. Keep this browser and return to this page to check for a reply. Don’t include passwords, payment details or sensitive personal information.