Privacy policy

The short version: we collect as little as we can, we don't sell any of it, and nothing here needs an account.

• Your email: if you give us your email, on the homepage, the pricing page, a guide page or in the planner, it goes to Kit (US), the service we send email from. With it we keep where you signed up (for example "homepage", or "demo-save" plus "ig" if you came from our Instagram) and whether you asked for the founding offer. We use it to send you your trip, the launch email and occasional news about Thaitinerary. Every email has an unsubscribe link, and we delete on request: hello@thaitinerary.com.
• A trip you keep: when you use "Keep this trip" or "Send me this trip at launch" in the planner, the trip travels with your email: its link, which rebuilds the plan (your stops, nights, month and answers), a one-line summary, the month, the number of nights and, from the save card, the budget level you picked. That is how we can send it back to you.
• If Kit is down: the same details go to Formspree (US) instead, so a signup isn't lost. The planner's feedback box also goes to Formspree: your rating and comment with the trip's summary, month and nights, and no email.
• In your browser: the planner keeps your last trip in this browser's local storage and offers to pick it up again if you come back within 14 days; clearing this site's data removes it. It also notes whether this browser has kept a trip and whether you've seen a one-time tip. The tag of the link you arrived by ("ig", say) sits in session storage until you close the tab, and goes along with a signup and with the anonymous events below, so we can see which links bring people.
• Analytics: Vercel Web Analytics counts visits without cookies: the page, the site that sent you, and your country, device and browser type. We also record a small set of anonymous events, such as a plan being built, a partner link being clicked or a signup going through, with details like the number of nights, the month, the kind of party and that link tag. Never your email. No ad profiles, and no cross-site tracking on our part.
• Affiliate links: some booking links earn us a commission; the disclosure page explains how. Travelpayouts' script loads on every page and switches links to the partners it covers (Klook and Airalo, as of this update) so the click passes through Travelpayouts, which records it with our partner ID and the page it came from. To do that it sets a session cookie and keeps a few items in this site's local storage. Links to Agoda, Trip.com and SafetyWing carry our partner ID in the link itself. Partners report that a booking happened and what it earned us, not who made it. Once you're on a partner's site, its own cookies and privacy policy apply.
• Payments: none yet; nothing on this site takes a card. When paid features launch, payment will go through a dedicated processor, and this page will name it before anyone is charged.
• Hosting: pages are served by Vercel, which processes IP addresses in ordinary request logs to deliver the site.

Before paid features launch, this page will add how long we keep each thing and a formal way to exercise GDPR and CCPA rights. Questions or deletion requests: hello@thaitinerary.com.