Privacy policy

The data controller is GHIC — Global Human Intelligence Consulting (SARL unipersonnelle), 60 rue François 1er, 75008 Paris, France — SIREN 939 603 593, RCS Paris 939 603 593, VAT FR06939603593. Publication director and data protection lead: Philippe Guillamo (gérant).

For anything related to your data, write to philippe.guillamo@ghi-c.com. We answer within one month.

Everything is hosted by Google Cloud (Google Ireland Limited), Gordon House, Barrow Street, Dublin 4, Irlande, in the European Union — Cloud Run, région europe-west9 (Paris). Backups stay in the EU.

Your account, if you create one: email address, a securely hashed password (we cannot read it), your language, and — if you subscribe — your Stripe customer reference. Card details go straight to Stripe; we never see or store them. If you sign in with Google or Apple, we receive your email address from them and nothing else.

Your searches: the criteria you enter (dates, budget, departure city, group composition, travel styles, passport nationalities…) and the proposals generated for you. We store the nationality of the passports you select, never a passport number — we do not ask for one and have nowhere to put one.

Your group, within a search: the number of adults, the age of each child travelling, and for each animal its species, its weight and — if you tell us — its breed. We need them to price a trip honestly (child and infant fares, airline rules for animals) and to warn you about what would not be workable. They are stored with the search, shown back to you when you reopen it, and kept for exactly as long as the search itself (section 8). Legal basis: performance of the contract between you and us (Article 6(1)(b) GDPR). A share link never shows a child's exact age nor an animal's breed.

Your travel preferences, if you fill them in: the passport nationalities and any residence permit of your travellers, and the free-text list of places you would rather not be offered. They are used to pre-fill and steer your searches, and you can clear them at any time from your account.

Technical data: a hashed (unreadable) version of your IP address and an anonymous identifier, to enforce the free daily search limit; server logs; and the cookies listed in section 9.

Running your searches and showing you proposals, managing your account and your subscription: performance of the contract between you and us (Article 6(1)(b) GDPR).

Keeping the service secure and honest — enforcing the free daily quota, detecting abuse, keeping technical logs — and producing anonymous usage statistics to improve the product: our legitimate interest in a working, non-abused service (Article 6(1)(f) GDPR). You may object at any time.

Checking, when the anti-robot check is switched on, that a search is launched by a person and not by a robot (Cloudflare Turnstile, see section 6): our legitimate interest in protecting the service and its free searches against automated abuse (Article 6(1)(f) GDPR).

Showing our own partner ads to visitors who are not subscribers, and counting their displays and clicks as daily totals with no identifier: our legitimate interest in funding the free version of the service (Article 6(1)(f) GDPR). These ads load no third-party script and set no cookie — nothing is read from or written to your device in order to display them.

Issuing and keeping invoices: a legal obligation under French commercial and tax law (Article 6(1)(c) GDPR).

Sharing part of what the service earns with the person who referred you, but only once you choose to support them by accepting the banner shown when you arrive through their link: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time by deleting this site's cookies from your browser.

Trip proposals are produced by an automated pipeline: most of it is plain algorithms, and a language model (xAI) writes the parts that cannot be computed. The model receives your travel criteria only — never your name, your email or any account identifier. No decision producing legal effects about you is taken automatically.

Hosting and infrastructure: Google Cloud (European Union).

Payments: Stripe. Card details are entered on Stripe's side; we only keep a customer reference and what is needed for invoicing.

Transactional emails (address verification, password reset, subscription messages): Brevo.

Trip generation: xAI, which receives your search criteria only, never your identity.

Advertising: no advertising network, and therefore no advertising processor. The ads shown to visitors who are not subscribers are our own HTML cards, served by us, pointing to partners of the Travelpayouts affiliate network (eSIM, travel insurance, car rental, airport transfers, flight compensation, luggage storage, activities). Displaying them loads no third-party script and sets no cookie, and the partner receives nothing at all as long as you do not click: for display it is therefore not a processor of your personal data. If you do click, you arrive on the partner's own site, which applies its own cookies and its own privacy policy, and a commission may come to us if you buy. Displays and clicks are counted by us alone, as daily totals per advertisement, slot and language, with no IP address and no identifier.

Sign-in with Google or Apple, if you choose it: Google and Apple, for authentication only.

Anti-robot check, when it is switched on: Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. It runs when you reach the last two questions of the search form, unless you are a subscriber, and usually stays invisible: a box only appears if Cloudflare has a doubt. Its sole purpose is to tell people from robots. To do so, your browser connects directly to Cloudflare, which processes technical signals such as your IP address, your browser's user agent, a fingerprint of the secure (TLS) connection, and the key and address of our site. Cloudflare states that Turnstile does not access what you type into the form, and that these signals are not collected to identify, profile or target anyone, only to detect and block robots. Travel Planner only receives a single-use token, which our server has checked by Cloudflare and never stores; we send Cloudflare neither your IP address nor anything about your account. Cloudflare acts as our processor to run the check, and as a controller in its own right when it uses these signals to improve its robot detection. Details: Cloudflare's Turnstile Privacy Addendum and Cloudflare's privacy policy.

Travel prices and availability: Travelpayouts (flight prices and booking links; it also powers the suggestions under the “Leaving from” field — the text you type is sent to its autocomplete service, with no identifier and no IP address), Tiqets and Viator for activity tickets. These partners receive travel criteria only — dates, places, number of travellers — never your name, email or account identifier. When you click a booking link, the partner knows which of our links you came from.

Maps and place search: OpenFreeMap for map tiles and Photon, operated by Komoot, for geocoding. Both receive a place name or coordinates, nothing that identifies you.

We never sell your data, and we never share it for purposes of our own choosing beyond what is listed here.

Your account and searches are stored in the EU. Some processors are established outside the EU or may process data there: transfers are covered, as the case may be, by the European Commission's standard contractual clauses, or by an adequacy decision where the recipient is certified under the EU-US Data Privacy Framework. A copy of the guarantees applied can be requested at philippe.guillamo@ghi-c.com.

Cloudflare, Inc., which runs the anti-robot check, is established in the United States. Its privacy policy states that it is certified under the EU-U.S. Data Privacy Framework (as well as its UK extension and the Swiss-U.S. Data Privacy Framework), and that it would rely on standard contractual clauses should those certifications lapse.

Searches made with an account: 24 months, and deleted immediately when you delete your account.

Anonymous searches — made without an account — and quota counters: 30 days.

Account data (email, hashed password, preferences): for as long as your account exists. Deleting your account deletes them.

Invoicing and accounting records: 10 years, as French law requires.

Technical logs: kept for a short period for security and troubleshooting, then discarded.

Anti-robot check: Travel Planner keeps nothing from it — the token is used once, then discarded. For the signals Cloudflare processes, its privacy policy states that personal information is stored for a period consistent with its business purposes, or as long as needed to comply with its legal obligations.

Travel Planner uses a handful of functional cookies: your session (to keep you signed in), your language choice, an anonymous identifier (for the daily free quota), and — during the private preview — an access cookie. These are necessary for the service and are not subject to consent.

Arriving through a sponsor link (travel-planner.world/r/…) is only counted; a small banner then asks whether you want to support the sponsor whose link you followed. Only if you click “Yes” is a cookie set: it remembers that sponsor's code for 90 days, so that we can share part of what Travel Planner earns with them. If you decline or ignore the banner, nothing is recorded. It holds only the sponsor's code — nothing about you — and it never changes what you see or pay; you can withdraw your consent at any time by deleting this site's cookies from your browser.

There are no advertising cookies: this site carries no advertising network, no consent platform and no advertising cookie. The ads shown to visitors who are not subscribers are HTML cards served by us; they set nothing on your device. Nothing happens until you click one — you then arrive on the partner's own site, which applies its own cookies and its own privacy policy.

When the anti-robot check is switched on, Cloudflare Turnstile runs in a frame served by Cloudflare. According to Cloudflare's documentation, it relies on cookies and local storage in your browser to maintain the state of the check and track visitor behaviour, and it may fail if they cannot persist. They are set and read by Cloudflare, not by us; Cloudflare describes the signals Turnstile collects as strictly necessary to detect and block robots. See Cloudflare's cookie policy.

Every cookie is listed, one by one, on our cookie page. There is no advertising consent window to reopen — this site no longer shows one — and your browser settings delete or block these cookies at any time.

Travel Planner is not intended for children under 15: an account, a subscription and a search are the business of an adult. The age of a child you take with you is not an exception to this — you give it yourself, as the adult organising the trip, it is attached to that search alone, and a child never holds an account here. If you believe a child has created one, write to philippe.guillamo@ghi-c.com and we will delete it.

You have the right to access your data, to have it corrected, to have it erased, to receive it in a portable form, to object to processing based on our legitimate interest, to ask for processing to be restricted, and to withdraw your consent at any time — withdrawing consent does not affect what was done before.

Most of it is available directly from your account page; otherwise write to philippe.guillamo@ghi-c.com. You may be asked to confirm your identity before we act.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.