Legal
Privacy policy
This policy explains what MachuPing collects to provide ticket availability monitoring, alerts, checkout activation, support, analytics, and abuse prevention.
Last updated: June 18, 2026
Who operates MachuPing
MachuPing is the operator and controller for the personal information collected through this website and app. You can contact MachuPing through the public contact page for privacy, account, billing, or data-help requests.
MachuPing is independent. It is not an official Machu Picchu ticket provider, does not represent the Peruvian government, and does not sell or reserve entrance tickets.
Information we collect
We collect only the information needed to run the service, support users, secure the product, and understand whether alerts and checkout flows work.
- Account information, such as your account identifier and email address.
- Monitor setup information, such as selected routes, dates, party size, optional time-slot preferences, monitor status, pause/delete status, and setup locale.
- Payment records, such as Stripe customer and payment identifiers, amount, currency, purchase status, and checkout activation records. MachuPing does not store full card numbers or card security codes.
- Contact requests, such as email address, name, topic, message, source path, user agent, and support status.
- Operational records, such as notification attempts, alert events, alert links opened or clicked, provider redirects, setup results, failed delivery records, and recovery-email unsubscribe status.
- Analytics and device context, such as page path, referrer, user agent, anonymous visitor id, short-lived session id, first landing path, campaign parameters, Core Web Vitals, setup events, login events, checkout events, contact form events, and purchase events.
Cookies, analytics, and marketing measurement
MachuPing uses first-party cookies and local storage to remember an anonymous visitor id, a session id, first landing path, and campaign attribution such as UTM parameters and ad click identifiers. These help us understand which pages and campaigns lead to setup, checkout, contact, and purchase events.
If PostHog is configured, browser and server-side events may be sent to PostHog for product analytics, web vitals, error context, funnel measurement, and session replay with configured masking. Browser settings, privacy tools, or ad blockers may prevent browser analytics from loading.
If Google Ads or site verification tags are configured, they may be used to measure ad performance or verify site ownership. We do not use these tools to sell personal information.
How we use information
We use your information to create and manage monitors, check selected route/date targets, send alert emails, activate paid setups, process support requests, prevent duplicate activation, diagnose delivery or checkout problems, measure product performance, prevent abuse, maintain security, and comply with legal or payment obligations.
We may also use aggregated or de-identified information to understand service reliability, availability patterns, and whether notifications help travelers react faster.
Service providers
We share information with service providers only as needed to operate MachuPing. These providers may include Firebase or Google services for authentication, Stripe for payments, PostHog for analytics, Resend for email delivery, Hetzner for hosting, Cloudflare for DNS, CDN, and tunnel services, and Google Ads or verification services where configured.
These providers process information under their own terms and privacy commitments. They may process information in countries other than yours.
Retention
We keep account, monitor, purchase, notification, contact, and analytics records for as long as needed to provide the service, support users, prevent abuse, understand service reliability, resolve disputes, meet tax or payment obligations, and maintain business records.
Deleted or paused monitors may remain in backup, audit, purchase, notification, or abuse-prevention records for a reasonable period. If you ask for deletion, we will delete or de-identify personal information where reasonably possible unless we need to keep it for legal, security, payment, or operational reasons.
Your choices and rights
You can pause or delete monitors from the app dashboard where those controls are available. You can also contact MachuPing for account, billing, access, correction, deletion, or privacy-help requests.
Depending on where you live, you may have rights to access, correct, delete, object to, restrict, or receive a copy of personal information. If you are in California, MachuPing does not sell personal information and does not knowingly share personal information for cross-context behavioral advertising as those terms are commonly used in California privacy law.
You can limit some cookies or analytics through browser settings, privacy tools, or ad blockers. Some operational and server-side records may still be created when needed for checkout, security, support, or service delivery.
Security and limits
We use reasonable technical and organizational measures to protect the service, but no internet service, email system, payment flow, or hosting provider can be guaranteed to be completely secure.
Alert emails may arrive late, be blocked, land in spam, or be affected by provider outages, mail filtering, user settings, or official ticket-provider changes. This policy does not change the limits in the Terms of service.
Changes to this policy
We may update this policy when the product, providers, analytics setup, legal requirements, or operations change. The updated date on this page shows when the latest version took effect.