Privacy Policy
Version 2026-10-16
Who is responsible
[Controller name], [Address], [Email]. See the Impressum.
What we store and why
- Your trip (days, places, stays, dates, notes), tied to a random token in a cookie on your device, so the planner can reload it. Basis: providing the service you asked for (Art. 6(1)(b) GDPR).
- Your account if you sign in: your email, name and Google account id, the date you accepted these terms and the version, and which trips are yours. Basis: Art. 6(1)(b) GDPR.
- Plans you send us: a copy of the plan, your name, email, country, optional phone and message, so a planner can reply. Basis: Art. 6(1)(b) GDPR.
- Chat questions you type into the planner, with the trip they are about, to answer them. Basis: Art. 6(1)(b) GDPR.
- Planner interactions: which buttons you tap, which previews you open and which tabs you switch to, with the trip they belong to and never anything you type, to see what works and improve the planner. Basis: legitimate interest (Art. 6(1)(f) GDPR).
- Server logs (IP address, time, page) to keep the service secure and limit abuse. Basis: legitimate interest (Art. 6(1)(f) GDPR).
Cookies
We only use cookies needed for the service: a session cookie, a trip cookie that keeps your trip on this device, and, if you sign in, a cookie that keeps you signed in. No advertising or tracking cookies.
Who processes data for us
- Google (sign-in with Google; maps and routes)
- [Hosting provider] (servers and database)
- Resend (sending email)
- Bunny.net (images)
- Anthropic (answering chat questions)
Some of them process data outside the EU under the EU Standard Contractual Clauses or an adequacy decision.
How long we keep it
- Trips in an account: until you delete them or your account.
- Trips without an account: [retention, e.g. deleted 12 months after the last edit].
- Plans you sent us: 24 months, then deleted.
- Planner interactions: 90 days, then deleted.
- Server logs: [retention, e.g. 14 days].
When you delete your account we delete it and its trips right away. Plans you already sent us are kept as above so we can answer them.
Your rights
You can ask for access, correction, deletion, restriction or a copy of your data, and object to processing based on legitimate interest. "Download my data" and "Delete account" in the account menu do the first and the most common. For anything else, email [Email]. You can also complain to a data protection authority.