How we handle your data

Session-only by default. Trip preferences, city, dates, pace, and intentions are held only in your browser session. They are not sent with plan feedback or commercial measurement. A generated draft may be kept in session storage for up to 12 hours after your latest change, so a refresh does not immediately erase your work. Closing the tab clears that browser-session draft, and refreshing after it expires starts a new draft.

Optional plan feedback. If you answer the question about whether a plan felt personal, the feedback payload contains only a random response ID and your 1 to 5 rating. It does not contain your dates, area, intentions, itinerary, email, or free text. The response ID lets a corrected rating replace the earlier answer instead of creating a duplicate. On configured beta hosting, the server converts Vercel's source address into a keyed digest that changes each UTC hour. The Tripmindful application does not add the raw address to application logs or Supabase, and the digest is kept in a separate abuse-control bucket rather than with your rating. Counter rows are marked to expire after 48 hours and are deleted during later submissions and at beta close.

Commercial measurement. When labeled commercial suggestions are shown, Tripmindful records an identity-free impression or click containing a random event ID, offer, partner, channel, placement, and, for an outbound click, the destination URL. These records contain no account, browser identifier, city, dates, preferences, or itinerary. Turning commercial suggestions off removes the commercial surface and stops new offer events.

Payments. If you purchase a voucher or offer through Tripmindful, payment is processed by Mollie B.V., a licensed payment institution regulated under Dutch law. Tripmindful does not store card numbers or payment credentials.

Saved preferences. The validation beta does not require an account and does not promise cross-visit preference storage. If durable saving is enabled later, it will require a separate, explicit consent choice and a deletion path before any preference is retained.

Traffic and performance. The current site loads Vercel Analytics and Speed Insights for aggregate traffic and performance measurement. Tripmindful does not install advertising pixels or a cross-site ad tracker. Vercel also provides the trusted network source used for the short-lived feedback abuse control. The final legal notice must name this processor and confirm its production configuration, retention, and transfer terms.

Cookies and local storage. Tripmindful sets no advertising, profiling, or cross-site tracking cookies. That is why the current product has no cookie banner. What we do use: session storage in your browser for the 18+ confirmation and your in-progress trip (cleared when you close the tab or if the trip is unchanged for 12 hours), and an HTTP-only, short-lived admin cookie that is used only on the private metrics page. If we add a cookie that needs consent, we will ask first with a real choice, never a pre-ticked box.

Partner links. Some outbound links to ticket and tour partners carry attribution parameters. Cookies those partners set on their own sites are governed by their privacy policies, not ours.

Age-gated content. The optional legal-context layer for coffeeshops is shown only when you explicitly request it and is never stored or profiled against you.

Questions or deletion requests: contact dslightinfo@gmail.com