Privacy Policy
This policy explains what personal information goTravel ("we", "us") collects when you use the goTravel website and trip planner, how we use it, who we share it with, and the choices and rights you have. If you have any questions, contact us at [email protected].
1. Summary
- You need a free account to use the planner. Your trip plan is stored in your own browser and is also kept in your account while you are signed in, so that it opens on your other devices.
- If you create an account, we keep only what is needed to run it: your email address, the name you choose, the trips you save, your reviews and messages, and any trip pass on your account. Saved trips are private: only you can see them.
- We do not use advertising trackers or analytics tools, and we never sell personal information. The only cookie is a small one that lets our home page greet you by first name while you are signed in.
2. Information stored on your device
The planner saves your trip settings (dates, number of travellers, travel style, budget, chosen areas, your hotel's location if you add it, checklist progress, the notes and places you add to a day, currency and display theme) in your browser's local storage, so that your plan is still there when you return. If the app encounters an error, a short technical note (time, error message and app version, up to the last 20) is kept in the same place so that you can share it with us if you ask for help. Pages, photos and map tiles you have viewed may be kept in your browser's offline cache so the planner can open without a connection.
This information stays on your device. It is not sent to us while you are signed out. When you sign in, your trip is also kept in your account (see section 3). You can delete it at any time with Start over in the planner or by clearing this site's data in your browser settings.
3. Information we collect when you have an account
Creating an account is optional. If you create one, we collect and store:
- Account details: your email address and the display name you choose. Your password is stored by our database provider in hashed form. We cannot read it. If you sign in with Google, Google shares your name and email address with us, but not your password or contacts.
- Reviews: your rating, title, text and the month of your visit. Approved reviews are public and shown with your display name.
- Reports and messages: reports you make about reviews, and messages you send us through the planner, including the reply-to email address and the page you were on.
- Saved trips (when you are signed in): the trip you plan while signed in is kept in your account automatically, with a name you can change: its planner settings (trip length, cities and route, travel dates or month, number and type of travellers, travel style, budget, chosen areas, your hotel's location if you added it, chosen day plans, checklist progress and the notes and places you add to a day) and when it was created and last changed. Changes you make while signed in are saved automatically. You can remove any trip from your account at any time. It then stays only on your device. Saved trips are visible only to you. Our team does not look at them, and they are never published or shared.
- Trip passes: the country, start and end date, and, for purchased passes, the payment reference and amount.
- Price reports: when you tell us what you paid for a ticket or a journey, the price goTravel showed, your answer, the amount and currency you paid if it was different, the day you paid and your note. Other travellers see only how many people confirmed a price and the last day one was paid, never who. Our editors see your display name with the report.
- PDF itineraries: when you download one while signed in, the country, the number of days, the date and time and the reference code printed on the PDF. The PDF itself is made in your browser and is not sent to us. We use this record to prevent the paid content from being copied in bulk or shared, and to decide refunds under our Terms.
A sign-in token is stored in your browser so that you stay signed in.
4. How we use information
We use account information to create and run your account, sign you in and send account emails such as confirmations and password resets. To publish and moderate reviews. To answer your messages and correct prices or routes you report. To provide the trip pass features you have bought or been given. To keep the service secure and prevent abuse. And to keep records required by law.
Where the law requires a legal basis, we rely on performing our agreement with you (running your account and trip pass), our legitimate interests (moderation, security and improving the accuracy of our information), and legal obligations (financial records).
5. Payments
Trip passes are paid for through a third-party payment provider. You enter your payment details directly on the provider's secure payment page. We never see or store your full card number. The provider tells us that the payment succeeded, with a reference and the amount. The payment provider processes your payment information under its own privacy policy and keeps payment and tax records for as long as the law requires.
6. Who we share information with
We do not sell or rent personal information, and we do not share it with advertisers. We share it only with:
- Service providers that run goTravel on our behalf and may use the information only on our instructions: Supabase (database and sign-in, hosted in the European Union, Frankfurt), Resend (account emails), our payment provider and our website hosting provider.
- Other travellers, who can see your approved reviews and your display name.
- Authorities, when we are required to by law or need to protect the rights and safety of our users or others.
Sponsored hotel listings are paid placements. Advertisers receive no information about you from us. If you follow a listing's link to the hotel's website, that website's privacy policy applies.
7. Services your browser connects to
To display the planner, your browser connects directly to a few other services. Like any website, they receive your IP address and standard browser information. They receive nothing about your trip.
- Unsplash (images.unsplash.com), for destination photos. Privacy policy
- OpenStreetMap (tile.openstreetmap.org), for map images when you open a map in the app. Privacy policy
- ExchangeRate-API (open.er-api.com) for current exchange rates. No personal information is sent.
- Google Maps (or the maps app on your phone), only when you choose to open a place or directions there. Privacy policy
Fonts are served by goTravel itself.
8. Cookies
goTravel does not use cookies for advertising or analytics. While you are signed in, the planner sets one first-party cookie, gt_user, holding only your first name, so that the goTravel home page can show that you are signed in. It is removed when you sign out and expires after 30 days. The planner otherwise uses your browser's local storage, described in section 2, only to provide its features.
9. How long we keep information
Account details, saved trips, reviews, trip passes and the records of PDF itineraries are kept until you delete them or your account. Price reports count in the planner for one year and are deleted with your account. Messages you send us are kept for up to 24 months and then deleted. If you delete your account sooner, they are kept without the link to your account. Records of payments are kept by the payment provider for the period the law requires. Our hosting provider keeps standard technical logs (IP address, time and page requested) for a short period for security and reliability.
10. International transfers
Account data is stored in the European Union. Some service providers may process information in other countries. Where they do, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
11. Your rights and choices
You can change your display name, edit or delete your reviews, and delete your account at any time from the account menu. You can rename, remove or delete any saved trip in the planner, under More → Your saved trips. Deleting your account immediately removes your login, display name, saved trips, reviews, any trip pass and the records of your PDF itineraries.
Depending on where you live, you may also have the right to request a copy of your personal information, ask us to correct or delete it, object to or restrict certain processing, and receive your information in a portable format. To make a request, contact [email protected]. We will respond within 30 days. You may also complain to your local data protection authority.
12. Security
We protect personal information with encrypted connections, access controls that limit each user to their own data, and providers that meet recognised security standards. No online service is completely secure, so please use a strong password that you do not use elsewhere.
13. Children
goTravel is intended for adults planning trips. Accounts are only for people aged 16 and over. If you believe a child has created an account, contact us and we will delete it.
14. Changes to this policy
We will update this policy before introducing any new kind of data collection, and the date at the top will change. If a change is significant, we will tell account holders by email.
15. Contact
For any question about this policy or your personal information, contact [email protected].