Privacy notice

Data we keep: email, display name, language, and the trips and gear lists you save. No national ID numbers, health history, or emergency details.

Purposes: providing your account, saving trips, and alerts you opt into. Consent is separated by purpose.

Processors: Cloudflare (hosting, database) and Resend (email). Data may cross borders per those providers.

Retention (draft policy): raw analytics ≤ 30 days, aggregates 13 months, security logs 90 days, trip data until you delete it or close your account.

Your rights: export and delete your account from the member area. Trips are private by default; share links use revocable random tokens.

This notice is a draft that must be reviewed for the legal basis before launch.