Privacy policy
Last updated: 5 November 2026
Draft: the owner's details are missing and a professional still has to review this text.
Controller
The controller of your data is [TU NOMBRE COMPLETO O EMPRESA], tax ID [TU NIF], at [TU DIRECCIÓN POSTAL]. For anything about your data, write to [TU EMAIL DE CONTACTO].
What data we process
- Account: your email and, if you sign in with Google, your Google name and photo.
- Profile: name, username, bio, Instagram and photo, if you add them.
- What you publish or do: trips, photos, notes, comments, ratings, who you follow, copied trips, bookings you tick off and reports.
- Clicks on booking links: the browser type and a pseudonymous code worked out from your IP and browser, which changes daily and doesn't store the IP. After 90 days it's replaced by a random value.
- Security: sign-ins, failed attempts, data downloads and account deletions, with your internal id or pseudonymous codes of your email and IP.
- Acceptance: the version of these terms you accepted, and when.
- Trip visits: just adds one to a counter, with no data about who visited.
- Technical logs: our providers may log data such as your IP so the service works and stays secure.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Giving you access and providing the service: account, trips, copies, comments, notifications | Performance of a contract (GDPR art. 6.1.b) |
| Counting clicks, visits and points, and showing creators their stats | Legitimate interest in the service working and recognising contributors (GDPR art. 6.1.f) |
| Security, activity logs, moderation and abuse prevention | Legitimate interest (GDPR art. 6.1.f) |
| Meeting legal obligations and requests from authorities | Legal obligation (GDPR art. 6.1.c) |
We don't sell your data, we don't show ads, and we don't make automated decisions with legal effects on you. Moderation is done by a person.
What other people see
Your profile (name, username, bio, Instagram, photo, points, level and badges), your public trips, your comments and your follower count are public. Anyone can find you by name or username.
Hidden-link trips are visible to whoever has the link. Your drafts, private trips and copies, your booking list and your email aren't public. Whoever administers the site can see your email and the data needed to moderate.
Who it's shared with
- Supabase: database, sign-in and photo storage. Our data is in the Paris region (EU).
- Vercel: website hosting. It may process data outside the EU.
- Google: only if you choose to sign in with Google.
- OpenFreeMap: serves the maps, so it receives your IP when they load.
- OpenStreetMap (Nominatim): receives the text of places you search for, sent from our server.
- Trip photos are in private storage: they only show if the trip is shared or it's yours.
- Third-party sites: some preview images load from the original site, which receives your IP. When you follow a booking or Google Maps link you leave TravelLikeMe and that site's policy applies.
Any transfers outside the European Economic Area rely on the safeguards in the GDPR, such as adequacy decisions or standard contractual clauses.
How long we keep it
We keep your data while you have an account. Deleting it removes your profile, trips, photos, comments and ratings. Copies other people already made of your trips stay in their accounts, with the text and photos they copied: if you need something removed from them, write to us.
Periods: security logs, 12 months; click codes, 90 days; read notifications, 12 months; closed reports, 24 months. Points movements and moderation actions are kept as a record, but deleting your account unlinks you from the points you gave. We also keep whatever the law requires for the applicable period.
Your rights
You can request access, rectification, erasure, objection, restriction and portability. In Settings you can edit your profile, download your data and delete your account. For anything else, write to [TU EMAIL DE CONTACTO].
If you think we've mishandled your data, you can complain to the Spanish Data Protection Agency (aepd.es).
Minors
TravelLikeMe isn't aimed at children under 14, who must not create an account.
Changes
If we change anything important, we'll announce it on the site. The date above shows the last update.