Privacy policy

Last updated: 25 August 2026.

In short

No advertising trackers, no sale of data, no profiling.
Only strictly necessary cookies — which is why there is no cookie banner.
Your travel criteria are sent to an AI provider to generate itineraries — never your name, email or phone.
Deleting your account erases your data, itineraries, ratings and comments.

1. Data controller

The service is operated by the publisher of TripMyWeek (see the legal notice). For any question or request about your data: contactme@tripmyweek.fr. Requests are answered within one month at most.

2. Data we process

Account: email, first/last name and phone (optional except email), password (never stored in clear).
Public profile: the nickname you choose and/or an initials acronym, and your avatar.
Itineraries: the criteria you enter (destinations, dates, budget, travellers…) and the itineraries you save.
Community content: your ratings and comments.
Suggestion box: the message and category you send; if you are not signed in, a keyed pseudonym of your IP address (never the IP itself) used only for anti-abuse quotas.
Free trial (no account): your free-text travel wish; a keyed pseudonym of your IP address for the daily quota. The generated itinerary is kept in your own browser, not on our servers.
Verification & security: if enabled, a temporary email code (valid 15 min); optional two-factor secret.
Technical: error logs and anti-abuse usage counters.

3. Purposes and legal bases

Providing the service (generating and saving itineraries, community area) — performance of the contract.
Securing access, preventing abuse and fraud, moderating content — legitimate interest.
Suggestion box and product improvement — legitimate interest.
Email verification, when enabled — legitimate interest, at your initiative.
Anonymous, cookieless audience measurement (see “Cookies”) — legitimate interest.

4. AI providers and transfers outside the EU

To generate an itinerary, your travel criteria (destinations, dates, budget, interests, free-text notes) are sent to the AI provider configured by the administrator. Your identity is never included: no name, email, phone or account identifier travels with the prompt. Some providers are located outside the European Union (notably in the United States); such transfers rely on the safeguards of the GDPR (adequacy decision such as the EU-US Data Privacy Framework, or standard contractual clauses, depending on the provider — a copy of the safeguards is available on request at the contact address). Tip: avoid putting personal details in the free-text fields — they are not needed to generate a good itinerary.

Free-text comments may be checked by a keyword filter and an AI classifier to detect insults, spam or personal data. Only the comment text and a technical identifier are sent — never your name or email. These automated checks produce no legal effect on you; you may request a human review at contactme@tripmyweek.fr.

5. Public content

Saved itineraries may appear publicly in the community showcase, and your ratings/comments are visible to other members — always under your nickname or an initials acronym, never your real name or email. Do not put personal or sensitive information in itineraries or comments.

6. Recipients and processors

Our hosting provider, OVH SAS (data hosted in the European Union).
An email delivery provider (SMTP), for verification and password-reset messages, when configured.
The configured AI provider (see section 4).
Public map, photo, weather and geocoding services loaded by your browser: OpenStreetMap, OpenFreeMap, CARTO, Wikimedia Commons, Open-Meteo, Photon (Komoot), Nominatim. Like for any website resource, these servers see your IP address and the requested resource when your browser calls them.
Third-party booking sites, only when you click a booking link. Affiliated links carry a partner identifier that is not tied to your identity.

We never sell your data, and nobody receives it for advertising purposes.

7. Retention

Account and community data: for as long as your account exists. Deleting your account erases your data, itineraries, ratings and comments.
Sessions: 7 days (signing out deletes the session immediately).
Error logs and usage counters: about 30 days.
Generation cache (itineraries keyed by anonymised criteria, no account identifier): about 60 days.
Anti-abuse quotas (keyed IP pseudonyms for the trial and the suggestion box): useful for 24 h, purged with the counters above.
Email verification codes: 15 minutes. Password-reset codes: 30 minutes.

8. Security

Sensitive fields are encrypted at rest and passwords are only ever stored in a hardened, irreversible form. All access is over HTTPS, personal data is minimised and pseudonymised wherever possible, and optional two-factor authentication protects sign-in. For obvious reasons we do not publish the technical details of these measures; they follow the state of the art and are reviewed regularly.

9. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability over your data, and the right to define directives on what happens to your data after your death (French Data Protection Act, art. 85). Write to contactme@tripmyweek.fr; we reply within one month at most. You may also lodge a complaint with your data-protection authority — in France, the CNIL (cnil.fr).

10. Cookies and local storage

TripMyWeek only uses strictly necessary cookies, which are exempt from consent under art. 82 of the French Data Protection Act — that is why no cookie banner is shown:

tmw_session — keeps you signed in (7 days, deleted on sign-out).
tmw_oauth_state — protects sign-in with Google/Microsoft/Facebook against forgery (10 minutes).
locale — remembers your language (12 months).

Your browser's local storage keeps purely technical values that never leave your device: theme (light/dark), the free-trial itinerary, and motorcycle ride progress. If audience measurement is enabled, it uses Umami, a cookieless tool that produces anonymous statistics only, never linked to your account, with no cross-site tracking. If we ever introduced non-exempt trackers, your consent would be requested beforehand.

Offline mode. To let you read your trips without a connection, the app keeps copies on your device only (browser cache): your recent trips (and those you choose with “Keep offline”), the pages you visited, the photos and day routes already shown. Nothing is sent anywhere. You can turn off the automatic copy in “My trips”; everything is erased from the device when you sign out or delete your account, and when another account signs in on the same device.

11. Automated decisions

Itinerary generation and comment moderation are automated but produce no legal effect on you and do not prevent you from using the service; a human review can always be requested.

12. Minors

The service is not directed at children under 15 without the consent of a legal guardian.

13. Changes

This policy may evolve with the service; the date above always reflects the latest version. Significant changes will be announced on the site.