Privacy Policy
Last updated: August 2026
1. What we never see
Your trips are stored locally in your browser (IndexedDB). We do not require an account, and your trip content is never transmitted to our servers in readable form. No cookies, no tracking pixels, no third-party analytics.
2. Sharing is encrypted
When you share a trip, it is encrypted end-to-end (AES-256-GCM) inside the link itself. The link is the decryption key: we cannot read the trip, and neither can anyone without the link.
3. The public gallery (opt-in)
Publishing a trip to the gallery is an explicit choice. We store only the trip's title, description, day/stop counts, and the encrypted share link — never the decrypted content. You can unpublish at any time, which removes the entry.
4. What we do store
Minimal server-side data only: published gallery entries (see above), anonymous usage events (page/app opened, trip created, share created — no personal data, no IP-linked profiles), and content reports. Usage events are retained for 90 days and used only to understand how the product is used.
5. Your rights
You can delete your local data at any time by clearing browser storage. For server-side data (gallery entries, reports) contact us and we will remove it within 30 days.