Privacy policy

• Name, email address and a password hash when you register; Google account identifier, name and verified email when you choose Google sign-in.
• Saved items, itineraries, community posts, comments, reports and guide corrections that you choose to submit.
• Session identifiers, login time, IP address, browser or device information used for account security.
• Anonymous page-view records contain only the page path and type, language, coarse source channel, device category and time. They do not store the full referrer, full user agent, IP address or account identifier.
• After you consent, Google Analytics 4 processes page addresses, acquisition source, device and browser category, approximate region, and visit and engagement timing. We do not send it your site account ID, itinerary contents or form text, and Google Signals and advertising-personalization signals are disabled.
• Anonymous partner-card impressions and clicks, including offer, placement, source page, device category and time. These records are not tied to a traveller account.

• To provide accounts, synced saves, itinerary planning, sharing and community features.
• To authenticate users, prevent abuse, investigate faults and secure the service.
• To respond to corrections and reports and maintain content quality.
• To measure whether partner placements are useful and reconcile them with partner reports; a click is never presented as an order or revenue without evidence.

We do not sell personal information. Hosting, database, object-storage, identity and consent-based analytics providers may process data for us. Current infrastructure includes DigitalOcean, Cloudflare, Google sign-in and Google Analytics. If you follow a clearly labelled affiliate link, the partner’s own privacy policy applies on its site.

• We disclose only what is necessary to operate the service, meet legal obligations, protect users or act with your permission.
• We do not send your identity, precise location or complete itinerary to affiliate partners for attribution.

We retain information only as long as needed for the purposes above, security records or legal duties. Account sessions normally last no more than 30 days. We use encrypted transport, hashed passwords, restricted access and server-side authorization, but no internet service can promise absolute security.

• You can sign out, revoke a public share link, or stop submitting community content.
• You may ask to access, correct or delete your account and associated personal data. Some security, transaction or legal records may need to be retained.
• Browser-only saved items can be removed by clearing site data.
• Where local law grants additional rights, contact us to exercise them. We may need to verify your identity.

The service is intended for general travellers capable of planning their own trip and is not directed specifically to children. Contact us if you believe a child submitted personal information without appropriate consent. Because the site serves international travellers, information may be processed outside your country, subject to applicable law and contractual safeguards.

With analytics consent and an already loaded GA4 tag, we measure browser saves, confirmed new-trip saves and clicks on booking, official-site, map and planning links. We send only fixed action categories and language, not content identifiers, destinations, trip details, form text or private URLs. A browser save does not confirm account sync, and a link click is not a booking. You can withdraw consent in Cookie settings.