Privacy

Travelfiesta collects as little as possible to plan your trips. We never sell your data.

Who is responsible for your data

Travelfiesta is operated by Bragi AB, organisation number 559549-4252. Bragi AB is the controller of personal data processed through this service.

What we store

• Your email address (and name, if you sign in with Google) to run your account.
• If you start a trip before confirming your email address, we keep the trip and that address for 30 days so you can come back to it. Unless you confirm the address, both are then deleted.
• Your trips, chat messages with the Optimist, itineraries and ratings. We may read them to fix problems and to improve how the Optimist plans.
• For shared links: anonymous view counts per day and country, and suggestions friends leave with a random pseudonym.
• Payment status from Stripe. Card details never touch our servers.

Processors

• Our servers and database run at Hetzner in Germany. Cloudflare carries the traffic to them.
• OpenRouter routes your chat messages to the language model that plans your trip.
• Stripe handles payments, Resend sends emails, Sentry receives error reports without personal data, and Plausible provides cookieless, anonymous analytics.
• Google Ads tells us which of our ads lead to sign-ups and purchases. If you arrive from one of our ads, Google’s tag keeps that ad click in a cookie. When you start your first trip or create an account, we report only that a sign-up happened. For a completed paid checkout, we send the amount, currency and Stripe Checkout reference. We do not send your name, email, trip details or private links, and advertising personalization is disabled.
• Map tiles are loaded from OpenFreeMap. Directions open in Google Maps only when you tap them.
• Photos of sights come from Wikipedia and Wikimedia Commons. Our server looks up the public place names in an itinerary and delivers the photos itself, so your browser never contacts Wikimedia.

Cookies

We use strictly necessary cookies: your sign-in session, and on shared trip pages a random id so your pseudonym (like “Curious Otter”) stays the same. Two preference cookies remember the language of the last page you viewed and whether you closed the offer to switch language.

Google’s tag sets advertising cookies for Google Ads: _gcl_au, and _gcl_aw with the ad click when you arrive from one of our ads. They keep for 90 days; you can delete or block them in your browser, and Travelfiesta works the same without them. We also keep markers in your browser so the same purchase or sign-up isn’t reported twice. When you create an account, a cookie without any identifier marks the sign-up until it has been reported, for at most an hour.

Your rights

You can delete your account and all your data at any time from the account page. For a copy of your data or any question, email [email protected].