Privacy

What we process, and why

- What you type into the search. Usually your children's ages, a month and a budget. We send it to OpenAI (OpenAI, L.L.C., USA; EU Standard Contractual Clauses) to understand your request and to write your plan, and we store it without your name to run and improve the matching (Art. 6(1)(b) and (f) GDPR). Please don't type names or other personal details.

- Your plan. Stored on our servers so the link keeps working (Art. 6(1)(b)).

- Your email, only if you ask us to send your plan or buy the Family Pass. Booking reminders only if you tick that box (Art. 6(1)(a)); every reminder has a one-click unsubscribe. Mail is sent through Resend (Plus Five Five, Inc., USA; SCCs).

- Family Pass. Payments are handled by Stripe Payments Europe Ltd. (Ireland). We receive your email, the subscription status and its renewal date, never your card details (Art. 6(1)(b)). A cookie on your device (fts_pass) keeps you signed in to your pass; it is strictly necessary for the service you bought (§ 25(2) TDDDG).

- Server logs and security. Our servers (Hetzner Online GmbH, Germany) and CDN (Cloudflare, Inc.; SCCs) process your IP address briefly to deliver the site and stop abuse (Art. 6(1)(f)).

Analytics

We count visits with PostHog (EU servers, Germany) without cookies or any storage on your device (Art. 6(1)(f), legitimate interest in knowing which pages help families). Only if you click "Allow" do we store an identifier on your device to recognise return visits (Art. 6(1)(a), § 25(1) TDDDG). You can change this anytime under "Analytics settings" in the footer.

Live chat

If you use our chat, we process your messages, the page you write from and, if you give it, your email address to answer you (Art. 6(1)(b) and (f) GDPR). An AI assistant drafts replies that a person checks. Details: cc.concept.zone/legal/chat. The chat stores an entry in your browser's local storage only once you open it, so your conversation survives moving between pages.

Partner links

When you follow a link to a partner (for example Booking.com, GetYourGuide, Klook or Viator), the partner learns that you came from us so it can pay us a commission. Hotel links pass on the number of travellers and the children's ages so the partner shows rooms that fit. From then on, the partner's own privacy policy applies.

Retention

Search text: 24 months. Plans: as long as the link should work, at most 36 months. Email: until you unsubscribe or ask us to delete it. Payment records: as required by tax law (up to 10 years).

Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time (Art. 15–21 GDPR). Write to hello@familytripscout.com. You may also complain to a data protection authority.