What we collect, and why

You can try and share itinerary drafts without an account. If you save an itinerary for later, we keep it in your email-linked account. Here is everything we keep.

Your basket

Your basket lives in your own browser (local storage), with a random basket ID. It never leaves your device until you click a booking link or ask for a plan.

Drafts and saved itineraries

Draft changes are kept in your browser and encoded in shared draft links. Anyone with that link can read that version. Avoid putting private information in shared itinerary notes. To save for later, we verify your email with a single-use sign-in link. We store your email, saved itinerary changes and account sessions, and use a secure session cookie to keep you signed in. Only your account can edit its saved itineraries; people with a shared link can view them or make their own copy. You can remove an itinerary from your saved library.

Git-backed itineraries

The Git builder keeps unsaved drafts in this browser. Verified email is required to save a private itinerary in Cloudflare Artifacts. Saved plans include your trip brief, stops, notes, credited sources, named alternatives and version history. Publishing a version makes it readable and automatically discoverable in the shared library; later private edits do not change that published version. Making it private removes public discovery without deleting your history or independent remixes created by other travelers.

Authorized Unsold administrators can inspect private saved drafts, alternatives and history for support. Their access is read-only and inspection is recorded. They cannot edit your trip, change its active route, issue your authoring credentials or publish on your behalf. Email and access credentials are stored separately from itinerary documents.

When you ask for a plan

We need your email to make a plan. We store it with the trip, together with your basket and preferences, and we may email you about that trip. Your basket and preferences go to our AI to write the plan; your email does not. Anyone with the trip link can read the plan, so share it with care. The email is never shown on it.

Creator itineraries and saved remixes

Creator itinerary edits stay in the page until you save or export. Saving without email is available; choosing email-linked saving stores your email privately with that plan and does not send mail, enroll you in marketing or provide account recovery. Saved plans expire 180 days after your last explicit save. Your browser keeps a separate edit key; share links allow viewing and copying only. Keep the edit key to update or delete your plan. Passive reads do not extend expiry. Expired records, including private email and access digests, are removed by our hourly cleanup.

When you ask an advisor to book

We store the note and phone number you give us with the trip, and send them to our advisor so they can get in touch.

When you click a booking link

We log the click: which activity, the page you were on, the referring site, your approximate country, whether the request came from a person or an automated agent, and your basket or trip ID if you have one. We pass a random click ID to the partner so they can credit the booking to us. After that you are on the partner's site, under the partner's privacy policy.

Analytics

We use Cloudflare Web Analytics and PostHog to understand which pages and steps people use, so we can make the site better. Our analytics do not set cookies: PostHog keeps a random visitor ID in your browser's local storage instead. We also count itinerary visits using random visit IDs and itinerary identities, without storing your email or itinerary descriptions in analytics. We do not sell data or share it with advertisers.

Deleting your data

Email privacy@unsoldadventures.com with your trip link or email address and we will delete what we hold.