Privacy policy

Tralvler ("we", "us") is an AI travel planner available at tralvler.com and app.tralvler.com. Tralvler is the data controller for the personal data described in this policy. You can reach the operator at [email protected] for any privacy matter.

• Account data — your email address, display name, and a hash of your password (we never store the password itself). If you sign in with Google, we receive your email and profile name from Google.
• Trip content — the preferences you enter (budget, styles, party, pace, cities) and the itineraries generated from them, including your edits, picks and progress.
• Photos — pictures you upload for check-ins. They are stored on our servers and analysed once to verify the check-in.
• Device cookie — a random identifier ("tralvler_did") set in your browser, used to prevent abuse of the free plan and of our paid third-party services. It is not used for advertising.
• Analytics data — product usage events and cookies via PostHog (EU Cloud), used to understand how the product is used. IP addresses are anonymised. This may include session replays of how you interact with our pages; anything you type into input fields is masked and never recorded.

We process account and trip data to provide the service you signed up for (contract performance, Art. 6(1)(b) GDPR); the device cookie and related signals to prevent abuse (legitimate interest, Art. 6(1)(f)); billing data to manage subscriptions (contract performance and legal obligations); and analytics to improve the product (legitimate interest).

• Hetzner (Germany) — hosting; your data is stored on servers in the EU.
• Cloudflare — content delivery network and traffic protection in front of our servers.
• OpenRouter — AI generation. Your trip preferences and itinerary context are sent as prompts to large-language-model providers to generate and verify content. We do not send your email or account identity with these prompts.
• Google Maps Platform — place lookups, routes and place photos.
• Stripe — payment processing for Pro subscriptions. We never see or store your card details.
• PostHog (EU Cloud) — product analytics and session replay, including analytics cookies. IP addresses are anonymised and typed input is masked in replays.

Account and trip data are kept while your account exists. Photos are kept until you delete the memory they belong to or your account. Abuse-prevention signals are stored in pseudonymised form (hashed) and expire from our counters over time.

Under the GDPR you can request access to, correction of, or deletion of your personal data, object to processing based on legitimate interest, and request data portability. Email [email protected] and we will act on your request. You also have the right to lodge a complaint with your local supervisory authority.

If this policy changes materially we will update this page and the date above. The current version always lives at tralvler.com/privacy.