Privacy Policy

1. Data we handle

Account data: the name, email, profile photo and account ID that Google provides when you sign in.

Trip content: itineraries, resources, entries, rules, notes, links, photos and files you and your companions create.

Booking details: booking codes, flight or seat numbers, phone numbers, costs and private notes, stored separately from the itinerary.

Technical data: connection logs Cloudflare processes to run and protect the service, such as IP address and browser details. Trips uses no advertising or third-party trackers.

2. What public pages show

A public trip shows its itinerary and photos with the planner’s name and profile photo. Anyone can view and search it, and copy the itinerary (photos stay with the original).

Booking details, private notes, attachments, and the list of companions and their emails are visible to trip members. Public pages for Free trips show lodging by area and approximate location, and Pro can also hide specific days or entries.

Photos are re-encoded in your browser before upload, which removes EXIF data including GPS location.

3. How we use data

We use it to provide the service (sync, collaboration, exports, search), check identity and permissions, measure plan usage, process payments, answer your questions and prevent abuse.

Your personal data is used only to provide Trips. We don’t sell it or use it for advertising.

4. Service providers

Cloudflare provides hosting, the D1 database and R2 storage, Google Firebase Authentication handles sign-in, OpenFreeMap serves map tiles, and Photon by komoot powers place search (your browser sends search terms to Photon directly). Once payments open, our payment provider handles subscriptions and invoices.

These providers may process data in other countries, and we share only what they need to provide their service.

5. Data on your device

For offline use, the app keeps trips you opened, map tiles and attachments in your browser’s IndexedDB and cache, and remembers your language in localStorage and a cookie. Signing out clears the trip cache.

6. Retention and deletion

Deleting a trip also deletes its entries, booking details, photos and files. Copies others made from its public version belong to their accounts.

To delete your account or get a copy of your data, email support@stratoxphere.app and we will respond within 30 days. Transaction records the law requires are kept for the required period.

7. Your rights

Under applicable law, such as Taiwan’s Personal Data Protection Act or the EU GDPR, you can access, copy, correct or delete your personal data, or ask us to stop processing it. Reach us at the address above.

8. Security and children

Data travels over encrypted connections and access is checked against identity and permissions. Attachments download only for signed-in members, and photo URLs carry hard-to-guess signatures.

Trips is meant for users aged 13 and over.

9. Updates and contact

We announce material updates to this policy in the service beforehand.

For privacy questions, contact Stratoxphere Lab at support@stratoxphere.app.