Privacy
The short version: we store the trips you build so share links keep working, we ask for an email address only if you want one, and we do not sell anything about you.
Last updated 2026.
What we store, and why
Trips you build
Every generated itinerary is saved so that share links and trip pages keep working. A trip page is unlisted rather than private: it is not indexed by search engines and its address is unguessable, but anyone you send the link to — and anyone they forward it to — can open it. What you type into the trip brief is never shown on that page and is not returned by our public API, and the written summary is instructed to describe the journey rather than the people taking it. Even so, treat a share link as public. It contains the choices you made — route, dates, pace, interests, and any free text you typed into the trip form or the tweak box. Anonymous trips are deleted automatically after 180 days. Trips you explicitly save to an account are kept until you delete them.
Your account, if you make one
Accounts are email-only and passwordless: we send a one-time code to sign you in. We store your email address and the trips you have saved. There is no password to leak because there is no password.
Signals you send
Thumbs up or down on a stop are stored against that stop so we can improve which places get recommended. A per-route counter tracks how many trips were built this week, for the "trending" strip. Neither is tied to advertising.
We store an email address in exactly two cases: you created an account, or you asked us to email you a copy of an itinerary. In both cases you asked first. We do not buy lists, we do not sell or rent addresses, and every message we send has an unsubscribe link.
Abuse prevention
We count requests per network address per day so that automated traffic cannot run up costs. That counter holds a hashed key and a number — not a browsing history — and it expires.
Who else sees your data
The service runs on Amazon Web Services in Singapore, and AWS processes data on our behalf as our infrastructure provider. To write the descriptive prose in a plan, the text of your trip brief is sent to a language model hosted inside that same AWS account; it is not used to train anyone's model. Map tiles are served by OpenStreetMap, and weather comes from NASA POWER and MET Norway — those requests reveal the coordinates being displayed, as any map does.
Outbound booking links point to third parties (accommodation, tours, car hire). Once you follow one, you are on their site under their privacy policy, not ours. Some of those links carry an affiliate marker so the partner knows the visit came from us — see affiliate disclosure.
Tracking
We use no advertising trackers, no third-party analytics pixels, and no cross-site profiling. Your language and unit preferences are kept in your own browser's local storage, not on our servers.
Your choices
You can use the planner without an account. You can ask us to delete your account and saved trips, or to send you a copy of what we hold, by getting in touch. Anonymous trips age out on their own.