Privacy

What we collect

• Your account: an email address and a password, which is stored only as a salted scrypt hash. We never see or store your actual password.
• Your Travel DNA: the interests, budget, pace and access needs you tell us, plus the places you save, skip or mark as done.
• Your trips: destinations, dates, party details and itineraries. Private notes on a trip are encrypted at rest.
• Security records: a salted hash of your IP address and browser user-agent against each session, used to rate-limit abuse. The raw values are never stored.

Location

We ask for your location only when you press a button that needs it, and we use it for that one request. We do not track you in the background, and refusing works fine. You can always type where you are instead. Coordinates we do keep are rounded before they are used as a cache key, so a cached search cannot be traced back to a doorstep.

Who else sees it

Place, map and routing lookups are made by our servers, not your browser, so the providers we use see our server rather than you. Map tiles are the exception: your browser fetches those directly from the tile host.

When a model is used to phrase a recommendation, it receives the itinerary facts and your stated preferences. It never receives your email address, your account identifier or anything about another traveller.

We do not sell your data, and we do not run advertising trackers.

Your rights

Under UK GDPR you can see your data, correct it, take it elsewhere, or have it deleted. All four are self-service: your profile page has a button to download everything we hold about you as JSON, and another to delete your account and every record attached to it. Deletion is immediate and permanent.

Cookies

Two, both strictly necessary: one holds your session and is HttpOnly, Secure and SameSite-scoped so JavaScript cannot read it; the other carries a CSRF token, is readable by our own page scripts by design, and grants no access on its own. There are no advertising or analytics cookies.