Privacy policy

TripPlan is a personal project. There’s no company behind it, no team: it’s built and run by one person, and that person is responsible for processing your data.

For anything about your data —looking it up, correcting it, deleting it, or asking anything at all— write to homecaroa@gmail.com. It’s an answered channel, not a decoration.

If you need the full identifying details of the person responsible —for example, to file a complaint with the Spanish Data Protection Agency— ask for them at that email and they’ll be provided.

Only what’s needed to prepare your trip. Specifically:

• Your account, if you create one: an email address and a password. We don’t see or store the password in the clear: it’s handled by our encrypted authentication provider.
• If you don’t create an account: an anonymous session opens when you save your first trip. It carries no name, no email, no data that identifies you — just a random identifier that lives in the browser you’re using.
• What you tell us about the trip: destination, dates, length, departure city, how many people are travelling and whether there are children, type of accommodation, spending level, what kind of experience you’re after, and the places you accept or discard.
• Any free text you write when describing your trip, if you write any.
• The dossier generated from everything above.
• Which link you arrived from, if you came through one of ours published on a social network or in an article: the tags we ourselves wrote into that link, the page you landed on, and the domain you came from. It’s saved with the trip. See section 5.

We don’t ask for or store your real name, your phone number, your postal address, your ID document, or any payment data. TripPlan doesn’t charge anything today and doesn’t process payments.

• To generate your dossier and save it for you. Legal basis: performing the service you asked for. Without this data there’s no trip to prepare.
• To send you service emails — welcome, password recovery, and letting you know your trip is ready. Legal basis: the same. We don’t send marketing.

We don’t do advertising profiling, we don’t sell data to anyone, and we don’t make automated decisions that produce legal effects on you.

Only with the providers needed for the application to work. Each one gets the minimum for its job:

• Supabase — database hosting and account management. Holds your email (if you have an account) and all your trip data.
• Google (Gemini API) — generates the dossier’s content. Receives the destination, the dates or month, how many people are travelling and whether there are children, spending level, type of experience, departure city, the places you’ve accepted or discarded, and any free text you’ve written. It doesn’t receive your email, your password, or your account identifier.
• Resend — sends the service emails. Receives your email address.
• Vercel — hosts the application and counts visits (Vercel Web Analytics, see section 5). Like any web server, it logs technical connection data.

Important, about the free text. It’s the only field where you can write whatever you want, and it’s sent as-is to Google to draft your dossier. We recommend you don’t write health data, other people’s data, or anything you don’t want leaving your device there.

All four are US companies, and some may process data outside the European Economic Area, relying on the safeguards EU rules provide for those transfers (standard contractual clauses and the EU–US adequacy framework).

TripPlan uses only cookies necessary for the site to work: the ones that keep you signed in, and one that stores which language you want to see TripPlan in, which is only written when you choose it yourself. That last one stores two letters —«es» or «en»—, doesn’t identify you, and isn’t shared with anyone. There are no advertising cookies, no analytics cookies, and no embedded social networks.

We do count visits. Since 15 August 2026 we use Vercel Web Analytics, which counts the pages that get opened without cookies and without creating any identifier for you: it doesn’t recognise you across sessions or devices. For each page view it records the route opened, the country, the device type and the browser.

What’s not sent to that measurement: anything you write, your email, or your trip identifiers. Addresses that carry one are grouped by their shape —«/viaje/[id]»— without the actual identifier, so it can’t be worked out from there which trip was opened. Your IP address isn’t stored in any system of ours; the country is inferred from the connection without keeping it.

And we save which link you arrived from. If you come in through a link we’ve published on Instagram, TikTok, YouTube or an article, that link carries tags we wrote ourselves —which network it’s from and which video— and we note them on your device to know which content works. It’s saved once, the first time; it deletes itself after 30 days; and it carries no identifier of yours, so it can’t be used to recognise you or track you across other sites.

From that, six pieces of data are saved and none of them say who you are: the link’s four tags, the page you landed on, and the domain you came from. From a search engine we keep that you came from Google, never what you searched for. When you create a trip, those six pieces of data stay saved with it, so we can tell which channel brings people who actually plan a trip.

The dossier’s map is drawn with data that travels inside the application itself: viewing it makes no request to any external map provider.

• Your trips and their dossiers: until you delete them. You can remove any trip from «My trips», and deleting your account removes all of them with it.
• Your account: for as long as you keep it. You can delete it yourself from Settings, whenever you want.
• Destination information we reuse to avoid repeating lookups: 90 days. It contains no data about you — it describes the destination and time of year, not who’s travelling.
• Which link you arrived from, on your device: 30 days, deleting itself. If you create a trip within that time, that data stays saved with the trip and lasts as long as it does.

If you use TripPlan without an account, your trips live tied to that browser’s anonymous session: if you clear its data or switch devices, you lose them and there’s no way to get them back.

When you share a trip, TripPlan generates a link. Anyone with an account who has that link can read the full dossier and save a copy to their account. Someone without an account can’t view it.

That link can’t be switched off. There’s currently no way to stop sharing a trip once it’s shared, so only share it with people you want to see it. If you need access withdrawn, write to us and we’ll delete the trip.

You can exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to homecaroa@gmail.com. We’ll respond within the timeframe the regulation sets.

You don’t even need to ask for erasure: you can delete your trips one by one from «My trips» and delete your whole account from Settings. Deleting your account removes all your trips and their dossiers with it, immediately and with no going back — we keep no copies and no bin to recover them from.

If you think we haven’t handled your data properly, you can complain to the relevant supervisory authority — in Spain, the Spanish Data Protection Agency.

TripPlan isn’t aimed at anyone under 14 and we don’t knowingly ask them for data. If you’re travelling with children, the only data we collect about them is how many there are and, if you provide it, their ages — never their names.

If what we do with your data changes, we’ll update this page and its review date. If the change is significant, we’ll notify you by email if you have an account.

See also the terms of use.