Privacy policy

What data and why

• E-mail address — sign-in with a one-time code. We do not send marketing e-mails.
• Display name — visible to people in your crews.
• Content you add (trips, plan, discoveries, notes, photos) — visible only to the people you share it with (you, the trip or the crew). Photos are stripped of EXIF data, including GPS.
• Location — only when you tap “Add my location”. Never in the background.
• Usage statistics — only with your consent: events such as “trip created” tied to an internal account ID, without post contents, photos, locations or e-mail. No session recordings.

Processors

• Supabase (database, sign-in, files) — servers in Frankfurt (EU).
• Vercel (application hosting, technical logs).
• PostHog (statistics, EU servers) — only after consent.
• Anthropic (quest suggestions, guide blurbs, blog drafts) — we send only trip destinations, dates, categories and public place data, no personal data.
• Map provider (map tiles) — sees the device IP address when the map is shown.
• Geoapify (place data for the trip guide) — receives only the trip destination and country, no personal data.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object, and to lodge a complaint with a supervisory authority. You can withdraw consent to statistics at any time.

Cookies and device storage

We use a strictly necessary sign-in session cookie, a cookie remembering your statistics choice and a language cookie. The device also keeps the last opened trip and unsent entries (offline mode) — they are removed when you sign out.