Privacy Policy

The short version

A Nomad’s Guide keeps a record of the places you have been, because that is the product. It does not track you around the internet, does not sell anything about you, and does not run advertising or analytics of any kind.

Everything you create here is private to your account unless you deliberately share it, and every share can be revoked.

What we collect

Only what the app needs to work. There is no hidden collection behind this list.

Your account

An email address and a password, handled by our authentication provider. We never see your password — it is hashed before it reaches storage and is not readable by us.

Your profile

A username, and optionally a display name, a short bio, a home country and a profile picture. All of it is optional except the username, and all of it is yours to change or clear.

What you record

The places you mark as visited and the dates you visited them, plus anything you choose to add: notes, ratings, journeys, journals, photographs, collections, and places you add yourself.

Payment

If you subscribe, Stripe handles the payment. Card numbers never reach our servers — we store only the customer and subscription identifiers Stripe gives us, and a record of the renewal terms you agreed to.

Location, only if you ask

The “Near you” feature and the map’s add-a-place tool ask your browser for your location. Your browser will prompt you, and you can refuse. When you allow it, the coordinates are used to run one search and are not stored.

A hashed network address

To stop abuse, we record a one-way hash of the network address behind certain actions — reporting content, for example. It is not reversible into your address, it is not linked to your account, and it is deleted within a day.

What we do not do

There are no analytics, no advertising, no tracking pixels and no third-party trackers in this application. We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising — including under the California Consumer Privacy Act, which uses those terms specifically.

We do not build a profile of you for marketing, and we do not email you anything except messages the app itself needs to send, such as confirming your address or resetting your password.

What is private, and what is shared

By default, everything you record is visible only to you. Sharing is always something you turn on, never something that happens by itself.

Sharing a journey or a collection

Creates a private link that only people you send it to can use. Sharing the itinerary or the list is separate from sharing your written notes, and separate again from sharing your photographs or the places you added yourself — each is its own switch, and each starts off.

Turning sharing off

Destroys the link permanently rather than pausing it. Anyone holding the old address gets nothing, and turning sharing back on issues a different address.

A public profile

Is off unless you switch it on in Settings. When it is on, it makes your name, bio, home country and picture readable — and nothing else. Your visits, journeys and collections are not part of it.

Who else processes your data

We use a small number of service providers to run the application. They process data on our instructions and for no purpose of their own.

Supabase

Database, authentication and file storage. This is where your account and everything you record lives.

Vercel

Hosting and delivery of the application itself.

Stripe

Payment processing and subscription billing, if you subscribe.

Mapbox

Map rendering. Your browser requests map imagery directly from Mapbox, which means Mapbox receives the network request needed to serve those images.

How long we keep it

Your account data is kept for as long as your account exists. Abuse-prevention records are kept for at most a day. Payment records are kept as long as tax and accounting rules require, which is generally several years and is not something we can shorten on request.

Your rights, and how to use them

You can read, correct and export the things you have recorded from inside the app, and change or remove your profile picture, name, bio and home country in Settings at any time.

Deleting your account is not yet a button in the app. Until it is, email us and we will delete the account and everything in it — the profile, the visits, the journeys, the photographs and the collections. We would rather say that plainly than point you at a control that does not exist.

Depending on where you live, you may also have the right to a copy of your data, to correct it, to have it deleted, to restrict or object to how it is used, and to complain to your data protection authority. Residents of California, and of other US states with comparable laws, have equivalent rights and the right not to be discriminated against for using them. To exercise any of these, email us.

Children

This service is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.

Changes, and getting in touch

If this policy changes in a way that matters, we will update the date at the top and, where the change is significant, tell you in the app.

Questions, requests and complaints all go to the same place: privacy@anomadsguide.com.