Privacy Policy
Last updated: 18 July 2026
This policy explains what personal data trippad.app collects, why, and the rights you have over it. Trippad is the data controller for this data — for anything privacy-related, contact [email protected].
What we collect
Account data — when you sign up we store your email address and name, and, if you sign in with Google, the avatar image Google provides.
Your trips — the trips, days, activities, notes and locations you create are stored so we can show them back to you. They stay private unless you enable sharing on a trip or make your profile public.
Technical data — our servers keep short-lived logs (IP address, browser type, requested pages) for security and debugging.
Why we process it
Providing the service — we process account data and trip content because that is what makes a trip planner work. GDPR calls this performance of a contract.
Analytics — we measure how the site is used only with your consent. If you never accept the analytics banner, no analytics run at all.
Security — we keep server logs because we have a legitimate interest in keeping the service safe and abuse-free.
Who else processes data
We share data only with the providers needed to run the service:
- Cloud hosting — runs our servers and database.
- Google — sign-in with Google (when you choose it) and the maps and place search in the planner.
- Email delivery — verification and password-reset emails.
- Google Analytics — site usage measurement, only after you accept analytics cookies (see Cookies).
Cookies
Essential cookies keep you signed in — the site cannot work without them, so they do not require consent. Analytics cookies are set only after you accept them, and you can change your mind at any time via "Cookie preferences" in the footer.
We also use your browser's local storage for preferences such as your theme and, before you sign up, locally saved draft trips. Local storage data never leaves your device.
| Cookie | Purpose | Duration |
|---|---|---|
| trippad.session_token | Keeps you signed in (essential) | Until you sign out or the session expires |
| trippad-analytics-consent | Remembers your cookie choice | 13 months |
| _ga, _ga_* | Google Analytics — tells returning visitors apart (only after consent) | Up to 24 months |
How long we keep data
Your account and trips are kept until you delete them or ask us to delete your account. Server logs rotate away within weeks. Analytics data is retained by Google Analytics for 14 months.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to processing, or withdraw consent at any time — withdrawing analytics consent is one click under "Cookie preferences" in the footer. Automated in-app account deletion and data export are on our roadmap; until they ship, email [email protected] and we will handle your request within 30 days.
If you are unhappy with how we handle your data, you have the right to complain to your local data protection authority.
Changes to this policy
If we change this policy in a meaningful way we will update this page and the date above, and announce significant changes in the app.