Privacy Policy

Last revised: August 2026

1. Data controller

Trip Planner (the "Service") is an independent, non-commercial project developed and maintained by Danylo Senchyshyn, acting as a private individual (the "Operator"). The Service is not affiliated with any registered legal entity. For any inquiry regarding the processing of personal data, please use the contact address provided in the "Contact" section.

2. Data we process

Account data: your email address, name, a password stored as a cryptographic hash (or your Google account identifier if you sign in with Google), and the status of two-factor authentication on your account.

Trip data: the trips, places, transport, accommodation, schedule, and budget entries you create, including the geographic coordinates required to display them on the map.

Security data: sign-in events, IP address, and browser identifier, processed to prevent unauthorized access and protect your account.

Performance data: page load speed metrics, transmitted in anonymized, aggregate form with no identifier linking them to a user account, used solely to identify and resolve technical issues.

3. Third-party service providers

Map display, place search, and route calculation are provided by Mapbox. Account-related emails (address verification, password reset, security notices) are sent via Resend. Where you choose to sign in with Google, authentication for that sign-in is provided by Google. None of these third parties are given or have access to your Trip Planner password. When the "Trip assistant" feature is used (available only with the user’s explicit consent), the text of the user’s request and information about the relevant trip (name, dates, cities, places and their categories, schedule outline, budget totals — without participant names or contact details) is sent to the Google Gemini service to process the request. The assistant runs on the user’s own API key; the key is stored encrypted and used solely for that user’s requests. Consent can be withdrawn at any time in the Account section, after which the key is deleted.

4. Public trip gallery (Discover)

If you choose to publish a trip to the public Discover gallery, its title, description, cover image, cities, day count, an aggregate budget estimate (converted to EUR), and its places, accommodations and transport (names, addresses, coordinates, dates) become visible to any user of the Service under your username, together with any likes, dislikes and comments left on it. Private notes and booking links, and exact per-item costs, are never included in the published listing. Other users never gain ongoing access to the trip itself — when someone clones a published trip, they receive an independent copy created directly in their own account, not a link back to yours. You can unpublish a shared trip at any time from its sharing menu, which immediately removes it from the gallery.

5. Data retention

Trip data is retained for as long as your account exists. Security data (sign-in events, IP address) is retained for no more than 12 months, after which it is deleted. Deleting your account deactivates it immediately (Settings → Delete account): you can no longer sign in, and the account and its data are hidden from normal use. The underlying data is not immediately erased — it is retained in an inactive state so the Operator can investigate abuse, comply with legal obligations, or restore the account if you request it. Permanent, irreversible erasure of your account and its data is available on request — see "User rights" below.

6. Administrative access to data

The Operator, as the sole administrator of the Service, has technical access to trip data (cities, routes, accommodation, places, schedule, budget) stored on the server. This access is used solely for operating and maintaining the Service — providing support in response to a user's request, diagnosing and fixing technical issues, and ensuring the Service functions correctly. Trip data is not reviewed on a routine basis and is not used for any purpose other than those listed above.

7. User rights

You may review and update your personal data from your account page at any time, and you may deactivate your account together with all associated data (Settings → Delete account). Upon request sent to the contact address below, the Operator will provide information about the data processed about you, a copy of that data, or perform its permanent, irreversible erasure.

8. Contact

For inquiries regarding the processing of personal data, contact: [email protected]