# What we collect, and why

> You can try and share itinerary drafts without an account, and save itineraries in an email-linked account. Here is everything we keep.

- Web page: https://unsoldadventures.com/privacy/

## Your basket

Your basket lives in your own browser (local storage), with a random basket ID. It never leaves your device until you click a booking link or ask for a plan.

## When you ask for a plan

We need your email to make a plan. We store it with the trip, together with your basket and preferences, and we may email you about that trip. Your basket and preferences go to our AI to write the plan; your email does not. Anyone with the trip link can read the plan, so share it with care. The email is never shown on it.

## Creator itineraries and saved remixes

Creator itinerary edits stay in the page until you save or export. Saving without email is available; choosing email-linked saving stores your email privately with that plan and does not send mail, enroll you in marketing or provide account recovery. Saved plans expire 180 days after your last explicit save. Your browser keeps a separate edit key; share links allow viewing and copying only. Keep the edit key to update or delete your plan. Passive reads do not extend expiry. Expired records, including private email and access digests, are removed by our hourly cleanup.

## When you ask an advisor to book

We store the note and phone number you give us with the trip, and send them to our advisor so they can get in touch.

## When you click a booking link

We log the click: which activity, the page you were on, the referring site, your approximate country, whether the request came from a person or an automated agent, and your basket or trip ID if you have one. We pass a random click ID to the partner so they can credit the booking to us. After that you are on the partner's site, under the partner's privacy policy.

## Analytics

We use Cloudflare Web Analytics and PostHog to understand which pages and steps people use, so we can make the site better. Analytics do not set cookies: PostHog keeps a random visitor ID in your browser's local storage instead. We do not sell data or share it with advertisers.

## Deleting your data

Email privacy@unsoldadventures.com with your trip link or email address and we will delete what we hold.

## Drafts and saved itineraries

Draft changes live in your browser and shared draft URLs. Anyone with a draft link can read that version. Avoid private information in shared notes. We verify your email with a single-use sign-in link when you save for later, and store your email, itinerary changes and account sessions. A secure session cookie keeps you signed in. Only the owner can edit saved itineraries; recipients can view them or copy them. Remove itineraries from your account library when you no longer want to keep them. Itinerary visits use random visit IDs and itinerary identities; account email and itinerary descriptions are excluded from analytics.

## Git-backed itineraries

Unsaved Git-builder drafts stay in this browser. Verified email is required for durable private saving in Cloudflare Artifacts. Saved documents include trip briefs, stops, notes, credited sources, alternatives and version history. Explicit publication automatically lists the saved version in the shared library; later edits stay private. Unpublishing removes public discovery while preserving history and independent remixes. Authorized Unsold administrators may inspect private saved drafts and history through audited read-only access for support. Travelers retain editing, active-route and publication control. Account identity and access credentials live separately from itinerary documents.