Privacy Policy
Travel Planner · last updated August 30, 2026
Travel Planner is a small, invite-only trip-planning site run by an individual for a handful of friends and family. It is not a commercial service: there are no ads, no analytics, no tracking, and nothing here is ever sold or shared with third parties for their own purposes. This page describes exactly what the site stores and why.
What we store
- Account: a username you choose, a display name you choose, and your role on the site. We deliberately do not collect your email address, phone number, or real name.
- Sign-in credentials: the public half of any passkey you register (the private key and any biometrics never leave your device), an optional nickname you give each passkey, and a log of security events on your own account (for example "passkey added") that only you can see.
- Google sign-in (optional): if you link a Google account, we request
only the
openidscope and store only Google's opaque account identifier so we can recognize the same account next time. We never receive or store your Gmail address, name, photo, contacts, or anything else from your Google account. - Trip data you enter: trips, destinations, dates, places you vote on, day plans, private notes, places you suggest for the catalog, and — if you choose to set one — the location and label of where you're staying.
- Your friend connections on the site, and any blocks you set.
Who can see what
- Everything is private to you by default. Votes, day plans, and your base location are visible only to the specific friends you share a stay with, and only when you share it.
- Private notes are never shared with anyone, ever.
- The site operator (the person who runs this instance and invited you) administers the database and can technically access stored data for maintenance; they do not publish it or pass it on.
Cookies and local storage
One session cookie keeps you signed in. The theme follows your device setting by default; an explicit light/dark choice is kept in your browser's local storage. There are no advertising, analytics, or cross-site cookies.
Your location
The Nearby page asks your browser for your device's position, only while that page is open and only if you allow it. The position is used on your device to sort places by distance; it is never sent to our server, never stored, and never visible to other people. Choosing "Directions" on a place opens Google Maps with your position and the place's coordinates, under Google's privacy policy.
Service providers
- Cloudflare hosts the site (Cloudflare Workers and its D1 database). Like any host, Cloudflare processes connection metadata such as your IP address to serve and protect the site, under Cloudflare's privacy policy. We do not enable optional analytics products.
- OpenStreetMap serves the map images: when a map is on screen, your browser fetches tiles directly from openstreetmap.org, subject to the OSM Foundation privacy policy.
- Google is involved only if you choose "Sign in with Google", under Google's privacy policy. Travel Planner's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Retention and deletion
Your data is kept while your account is active. You can remove it yourself, without asking anyone:
- Delete account (Settings) permanently removes everything you entered — trips, votes, plans, notes, base locations, suggestions, templates, friendships, and your sign-in credentials — from the live database immediately. What remains is an anonymized placeholder record, kept only so that your old username stays retired forever and other people's records stay consistent.
- Copies of deleted data in the hosting provider's automatic backups are not reachable through the site and can take several days to age out before they're gone from those support systems too.
- Deactivate account (also in Settings) is the softer option: it signs you out everywhere and hides you from other users, but keeps your data.
You can also ask the operator for a copy of the data stored about you at any time.
Age
This service is not directed at children: you must be 13 or older to have an account, and you confirm that when you register.
Changes
If this policy changes, the new version is posted at this address with an updated date above, and the change is announced inside the app after sign-in — so it reaches every user, not just the ones the operator knows personally. A material change will ask for your explicit acceptance; if you don't accept it by the date stated in the announcement, your account and its data are deleted as described above, rather than being held under terms you never agreed to.
Contact
This instance is run by the person whose invite chain brought you here; contact them directly — or the friend who invited you, who can pass it along — with any privacy question or request.