"Viator operates at a high-risk privacy level comparable to Facebook/TikTok (70-85 range) due to aggressive collection of sensitive personal data including precise geolocation, protected classification characteristics, and government ID numbers, combined with broad sharing to advertising networks and data aggregators for commercial purposes. The service employs persistent multi-technology tracking (cookies, pixels, SDKs) including email engagement and cart abandonment tracking, with vague indefinite retention policies and limited meaningful user control. Opt-outs are fragmented, deletion can be refused for undefined 'business reasons,' and functional penalties apply to users who disable tracking."
viator Privacy Concerns & Scorecard
Collects extensive sensitive personal data including precise geolocation, protected classification characteristics (race, ethnicity, sexual orientation, religion), government-issued ID numbers (driver's license, passport), financial account details, call recordings, and inferred data derived from other collected information.
Shares data with broad categories of third parties including advertising networks, data aggregators, and unspecified 'business partners' for commercial purposes including targeted advertising. Hashed email addresses and audience segments shared with advertisers.
Retention periods are vague and indefinite. Data retained 'as long as account is maintained or as necessary for stated purposes' with broad discretion to retain for legal defense, fraud prevention, and dispute resolution without clear time limits.
Deletion requests may be denied for 'legitimate business reasons' with no definition of what constitutes a legitimate reason, effectively giving the company discretion to ignore deletion requests.
Implements cart abandonment tracking to enable targeted reminder messages, creating persistent behavioral profiles of user shopping patterns.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, reservations, verification, customer service
Payment processing, fraud detection, transaction records
Personalization, inferred targeting, analytics
Trip planning, location-based recommendations, targeted advertising
Service delivery, personalized recommendations, marketing
Analytics, fraud prevention, targeted advertising, service optimization
Personalization, analytics, interest-based advertising, cart abandonment tracking
Platform display, social proof, content moderation
Customer service, complaint resolution, quality assurance, legal compliance
Personalization, automated decision-making, targeted advertising, risk assessment
Cross-Platform Tracking
Viator tracks users across websites and apps through cookies, pixels, SDKs, and server logs that enable cross-site behavioral tracking and retargeting. Data is combined with information collected from third-party websites. Third parties are allowed to collect and use user information for targeted advertising across the internet, and cart abandonment tracking enables reminder messages shown on other platforms.
Tracking Methods:
Cookies
First-party and third-party cookies store user preferences, login state, and tracking identifiers. Enables persistent identification across sessions and cross-site tracking.
Tracking Pixels
Invisible pixels embedded in emails and web pages track email opens, clicks, and page visits. Enables monitoring of user engagement and behavioral tracking.
Software Development Kits (SDKs)
SDKs integrated into mobile app collect device data, location, and behavior. Enable cross-app tracking and analytics.
Server-Side Logging
Server logs capture IP addresses, device identifiers, browsing activity, and transaction details. Used for analytics, fraud detection, and service optimization.
Email Tracking
Viator tracks when users open promotional emails and click links within emails, enabling behavioral profiling and retargeting.
Device Identifiers
Advertising identifiers (IDFA, AAID) collected from devices enable cross-device tracking and behavior correlation across multiple devices owned by the same user.
AI & Data Training
viator does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed viator
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.