← Back to Home

Privacy Policy

Last updated: March 2026

1. Introduction & Controller Identity

Welcome to David's Trip Planner. This Privacy Policy explains how we collect, process, and protect your personal data when you use our website and services. The data controller responsible for the processing of your personal data is David Veit.

If you have any questions about this Privacy Policy or your data, you can contact us at: david.veit.tu@gmail.com.

Important Notice

The availability of this service can be terminated at any time without prior notice. We are not responsible if any data gets lost. Your trip data is stored in our cloud database and is subject to the availability of the service.

2. What Personal Data We Process

  • Account & Profile Data: When you register using an email address and password, or connect your Google account, we retrieve your email address and, where applicable, basic profile information (like your name and profile picture) to identify you within the application.
  • Transactional & Travel Data: Trips you create—including names, dates, activities (with titles, types, locations, planning statuses, notes, and tags)—are stored in Firebase Firestore, our cloud database. This data is synchronized in real time across all your devices and with any collaborators you invite.
  • Collaborator Data: When you share a trip by email, the collaborator's email address is stored within the trip document to grant them access. This email is visible to all users with access to the trip.
  • Connected Services Data: If you attach Google Drive files to your activities, we read metadata (file name, ID) from your connected Google Drive to display these links. If you choose to export your activities to Google Calendar, we temporarily process your activities to formulate events but we do not store your Google Calendar data.
  • Device & Usage Data: We utilize local browser storage (localStorage) to save your cookie consent preferences and to keep track of recently visited trips so you can access them quickly on your dashboard.

3. Purposes of Processing

We process your personal data for the following specific purposes:

  • To Operate the Service: To authenticate you, create and manage travel itineraries, and store and synchronize your trip data securely in Firebase Firestore, enabling real-time collaboration between multiple users.
  • To Provide Interactive Features (Functional): To offer location search autocomplete and interactive maps via Google Maps.
  • To Enable File Linking: To allow you to search and attach files from your Google Drive to your trip activities.
  • To Export Trip Data: PDF and ICS file exports are generated entirely on your device (client-side). No trip data is sent to our servers for this purpose. If you choose to Add to Google Calendar, the specific activity details are sent directly to the Google Calendar API on your behalf.
  • To Improve Our Products (Analytics): To understand how you interact with the application and to analyze usage patterns so we can improve the user experience.
  • To Ensure Compliance & Security: To maintain the safety and security of the application and fulfill legal regulatory requirements.

4. Third-Party Service Providers (Recipients)

We do not sell your personal data. However, to provide the service, we share necessary data with the following trusted third-party providers:

Google Firebase (Authentication, Firestore & Analytics)

Firebase Authentication is used to securely authenticate your session via Google login. Firebase Firestore is used as the primary cloud database to store all trip, activity, tag, and collaboration data. With your explicit consent, we also use Google Analytics (via Firebase) to track generalized usage behavior.

Firebase Hosting

The application is served from Firebase Hosting. Standard web server logs (including IP addresses) may be collected as part of the hosting infrastructure.

Google Drive API

We interact with the Google Drive API solely to search for and display metadata of files in your Google Drive when you choose to attach them to activities. File content is not accessed or stored by us.

Google Calendar API

If you use the "Add to Google Calendar" feature, we request permission to manage your calendar events. We interact with this API strictly to create events reflecting your trip activities on your primary Google Calendar. We do not read your existing calendar events.

Google Maps Platform

If you consent to Functional cookies, we transmit location queries and IP addresses to Google Maps to render interactive maps and autocomplete suggestions.

5. Cookie Categories & Management

We use browser terminology "Cookies" to refer broadly to local storage technologies. You can open the Cookie Preferences menu at any time from the global footer to change your mind. Your preferences are categorized as follows:

  • Strictly Necessary: We use localStorage to save your cookie consent preferences and the IDs of trips you create or visit. If you decline this, trips will not save locally and you will need to find shared trips via their invitation link each time. A warning is displayed on the dashboard when this category is declined.
  • Functional: We utilize the Google Maps API. If declined, maps and location services are completely disabled. Affected features are grayed out in the interface to indicate their availability.
  • Analytics: We use Google Analytics via Firebase. Analytics scripts are only initialized if you explicitly accept this category.

6. Your Data Protection Rights

Under the GDPR and other applicable privacy laws, you possess the following statutory rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to update or correct inaccurate data.
  • Right to Erasure: You can delete all your data at any time using the "Delete All My Data" button on the dashboard. This permanently removes your account, all trips you own (including their activities and tags), and removes you as a collaborator from any shared trips.
  • Right to Object: You optionally have the right to object to processing based on legitimate interests.
  • Right to Revoke Consent: Wherever you provided consent (like Analytics or Functional cookies), you may instantly withdraw it via the Cookie Preferences menu in the footer.

To exercise any of these rights, please contact us at david.veit.tu@gmail.com.