Privacy

Reading the site

You do not need an account to read any trip or place. The pages hold no household data: nothing about who travels, where they live or what they have booked.

Cookies and this device

Reading the site sets no cookies. Signing in sets one cookie that keeps you signed in until you sign out; it is used for nothing else. It is an HTTP-only cookie, so the pages’ own scripts cannot read it, and the site is served over HTTPS.

Apart from that cookie, the browser keeps the notes in the table below. They hold no trips, places or travellers, and never a password or a code. Until accounts keep everything online, it also keeps what you make before or without signing in (your own trip drafts, copies of our trips and saved places) on this device only. You can remove every note at any time by clearing this site’s data in your browser.

The tab-only notes are deleted when the next page reads them, or when you close the tab. The sign-in notes never hold your address, except the one you typed for “Forgot password?”, until the reset page reads it.

The offline page

If a page fails to load because you have no connection, the site shows a plain “You are offline” page instead of your browser’s blank one. To do that, your browser installs a small service worker, which keeps one thing on this device: the offline page and the stylesheets and fonts it uses, fetched without your cookies. It keeps no other page, no answer from our server, no image and nothing about you. A page that loads normally is never stored. You can remove it by clearing this site’s data in your browser, and a new version of the site replaces the old copy.

Page counts

On the live site we count page views with Cloudflare Web Analytics. It sets no cookies and does not follow you from site to site. It shows us totals: which pages were opened (for example /trips/dolomites/), which site linked to them, and the country, browser, operating system and kind of device. It never shows us who you are. It runs only on the live site.

Maps and photos

Maps, photos and some globe facts load straight from the services that hold them: OpenFreeMap and Mapterhorn for maps, Wikimedia Commons for photos and Wikidata for country facts. Trip maps use Google Maps, which loads from Google under Google’s privacy policy (opens in a new tab). Like any website, these services see your IP address and browser when your device asks them for a file. We send them nothing else about you.

Server logs

Our host, Vercel, keeps request logs: the page asked for, the time, the browser and the IP address the request came from. We read them only to find faults, and Vercel deletes them after a limited time. Our own logs never hold your email address, a sign-in code or your IP address.

Accounts

Making an account is optional. If you make one, we keep your email address, your name if you give one, your password, if you set one, in a scrambled form that cannot be read back, and what you save: your trips, your copies of our trips, your saved places, bookings, packing, expenses and preferences. Your account itself and your trips live on our server, in the database run by Neon, our provider, in the United States, so they are the same on every device you sign in on. Your display preferences, and some of what you save, are still kept in this browser only, until we finish moving everything online. We use what we hold to sign you in and to show you what you saved, and for nothing else.

Trips and places held only in this browser are not sent to us unless you save them to your account, and you can clear them by clearing this site’s data in your browser. We are moving this to your account; when that is done, this page will say how what is left here is moved or deleted. Files you attach to a trip, once that is possible, are kept in a private bucket run by Cloudflare (R2), and are deleted with the item or with your account.

If you choose to save your travellers, we keep the number of adults and each child’s age with the date you entered it, so the ages move on each year, and a date of birth only if you add one; no names. Adults’ ages are optional. Trips then plan for the right ages on any device. Only you can see them. Trips you save to your account keep the party you planned them for (adults and children’s ages). You can change or remove your travellers on your account page at any time, and download everything we hold about you there. Removed data leaves our backups when they expire.

Saving your travellers is your choice, and pressing Save is your consent to us keeping them; we record the time you first did.

To stop repeated guessing of passwords and codes, we count attempts for each email address, for each IP address, and for the two together, over periods of up to one day. We keep only a scrambled form that cannot be turned back into the address or the IP. Each count is deleted at the next sign-in attempt by anyone once it is two days past its period, so at most three days after your attempt while the site is in use. Daily totals that hold no address or IP, such as how many codes were sent, are kept for 35 days.

Cloudflare Turnstile runs on the sign-in and sign-up forms to tell a person from a bot. To do that, Cloudflare looks at your browser, and our server sends Cloudflare your IP address with the check. It also runs on the request and report forms when you are signed out, and only once you open one. It never runs just because you opened a trip or place page.

Searching for a place

When you are signed in and search the map for a place that is not in our list, our server sends the words you typed to services built on OpenStreetMap data: openrouteservice first, then Photon, then Nominatim if one does not answer. If your map is showing somewhere, it also sends that point, rounded to about a kilometre, so nearer results come first. Those services see our server’s address, not yours, and are not given your name, your email address or your account id. We do not log or store what you searched for, and we remember an answer only in memory for a short time. Searching is limited per account, and the picker names the source.

Connected apps

If you connect an AI app such as Claude to your account, from Connected apps on your account page, you choose what it may do. By default it can look at the places on the site and read your own trips and saved places, and it cannot change anything. Booking codes and traveller details stay hidden from it unless you switch them on for that app. If you let it make changes, they are recorded with the app’s name and you can undo each one on the trip.

We keep a log of what each app did: which tool it used, whether it worked, which app it was and how long it took, for 90 days. The log never holds what the app sent or what we answered. You can pause every app at once, or disconnect one on the same page, and the change applies on that app’s next request. Deleting your account removes the log and your connections.

Requests and reports

You do not need an account to report a wrong fact or ask for a place or a trip. We store what you write in the form: for a report, the reason, your note, a link and the month you saw the problem if you give them, and the page you were on; for a request, the place or trip details you fill in. We give it a reference so you can quote it. Please keep personal details out of the notes; we remove email addresses and long runs of digits, such as phone numbers, from the note before it is stored.

We do not keep your IP address, your name or what your browser reports with a request, and a guest’s request is not tied to anyone. If you are signed in, the request keeps your account id, so we can tell repeats from one person. To limit abuse we count sends against a scrambled form of your address that cannot be turned back, and a guest’s sends are checked with Cloudflare Turnstile.

A reply address is optional. If you give one, or ask us to use your account’s, it is kept apart from the request, used only to answer that request, and deleted 30 days after we close it. We keep a closed request for 180 days after our decision, and a guest’s request that we mark as spam for 7 days. If you delete your account, your reply addresses are deleted and your requests stay, with no link to you.

Email

Sign-in, confirmation and password reset emails are sent by Neon, which runs our sign-in, from auth@mail.myneon.app under the name Neon Auth. They use Neon’s standard wording. We don’t send these emails ourselves yet. We use Resend only to send alerts to the site owner; it never sends you anything. Neither is used for newsletters or marketing.

Removing your account

You can delete any saved trip and remove your saved travellers on your account page.

To ask a question or have your account removed, email nitin27may@gmail.com. This is the way until the delete button is switched on.

Rules for using the site

What you may and may not do with the content is on the terms and copyright page.

Last changed 4 November 2026.