Privacy Policy

Last updated: March 2026

1. Data We Collect

When you create an account via GitHub or Google, we receive your username, email address, and profile picture from the OAuth provider. We do not access your password.

When you use the app, we store: countries you have visited, reviews you write, ratings you give, routes you generate, and follow/subscription preferences.

2. How We Use Your Data

Your data is used solely to provide the Travel Map service: displaying your profile, reviews, visited countries, travel story, and route plans. We do not sell your data to third parties.

3. Cookies & Local Storage

We use session cookies for authentication (NextAuth.js) and localStorage to remember your theme preference and cookie consent choice. We do not use tracking, analytics, or advertising cookies.

4. Third-Party Services

GitHub / Google OAuth — for sign-in. Their privacy policies apply to their processing of your data.

Supabase — for photo storage when you upload images.

Wikipedia, wttr.in, Google News — for country information displayed on country pages. No personal data is sent to these services.

Booking links (Kiwi.com, Booking.com, GetYourGuide) — external links only, no data is shared until you visit their sites.

5. Data Retention

Your data is stored as long as your account exists. You can delete your account at any time from your profile settings, which permanently removes all your data including reviews, ratings, visited countries, and saved routes.

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your account and all associated data
  • Export your data
  • Withdraw consent for non-essential cookies

To exercise these rights, use the “Delete Account” button on your profile page, or contact us via the form in the footer.

7. Security

We use HTTPS encryption, secure session management, and follow OWASP best practices to protect your data. Database access is restricted and credentials are stored securely.

8. Changes

We may update this policy from time to time. Significant changes will be communicated via the app.

9. Contact

For privacy-related questions, use the contact form in the footer or email the site administrator.