Privacy Policy

Last updated · October 2026

The short version

We collect your email (only if you sign in), the content you post to shared boards, and a cookie-free visit count. That's the whole list. We don't sell anything, we don't track you across the internet, and there are no ads.

What we collect

Account (optional): if you check in with email, we store your email address and a user ID so your boards sync across devices. Browsing works fully without an account.
Your contributions: hotels, restaurants, places, ratings and tips you post to the shared boards. These are public by design — that is the product. Don't post personal details you wouldn't put on a postcard.
Local data: your preferences, mission progress and offline contributions are stored in your browser (localStorage). They stay on your device.
Visit counts: we use Plausible, a cookie-free analytics tool, to count page views. It does not identify you and stores no personal data.

What we do NOT do

No advertising, no ad trackers, no cross-site tracking
No selling or renting of user data — ever
No GPS tracking: the "find my city" feature reads your location once in your browser to pick the nearest city, and never sends coordinates to any server

Where data lives

Public board content is stored in a managed cloud database (WorkBuddy BaaS). Account emails are stored there too. Your local progress never leaves your browser except when you choose to post something to a board.

Your rights

Delete a contribution: sign in and use the delete button on your own cards
Delete your account data: email us and we remove your account and associated records
GDPR / applicable privacy law: we act as the data controller for the content above. You may request access, correction or erasure at any time.

Contact

Privacy requests and questions: privacy@downtouch.travel (replace with your real inbox before launch — see DEPLOY.md)