Privacy Policy

This policy describes what PoppaTrip (Good Gary Apps LLC) collects and why. The short version: solo trip data lives in your browser, we don't run ad tracking, and payment details go to Stripe, not us.

What we collect

• Trip preferences and plans. For solo trips these are stored in your browser's localStorage and sent to our server only to generate recommendations — unless you use "Save this trip," which stores a copy of that trip's details (destination, dates, wizard answers, selected places/hotels, and your plan) on our server behind a private, unguessable link so you can resume it on another device. Anyone with that link can view and edit the trip. For group trips, trip data and participant first names are stored on our server so your group can plan together.
• Purchase records. When you unlock a trip we store the Stripe payment reference, the trip's identifier, and usage counters needed to deliver what you paid for. Your card number never touches our servers — payment is handled entirely by Stripe, which also handles the receipt email you provide at checkout.
• Operational logs. Standard web-server logs (IP address, request path, timestamp) and per-trip API cost accounting, used for abuse prevention and capacity planning.
• Contact and bug reports. The contact form and bug report form store your name (if given), email (if given), message, page URL, IP address, and browser user-agent, kept as long as we need it to answer you, and deleted when you ask us to.

What we don't do

• No advertising trackers, no sale of personal data, no data brokers.
• No account required — we don't collect names or emails for solo planning.

Third-party services

Generating a trip sends information to outside services that help build it. None of them get your name or email — only the destination, dates, or preferences needed to do their job:

• Anthropic — your trip preferences and destination, to write recommendations.
• Tavily — search text and photo search queries, to find real places and real photos.
• Google Places API — the destination search text, to build a list of candidate place names; nothing from Google is stored.
• LiteAPI — the destination and your travel dates, to fetch real hotel rates.
• Foursquare, Wikipedia, and Unsplash — place names, to find a real photo of each venue.
• OSRM and Photon/Nominatim — place names (to look up coordinates) and coordinates (to calculate travel time between stops).
• open.er-api.com — nothing personal; it only supplies currency exchange rates.
• Travelpayouts — your clicks on outbound flight and rental-car booking links, so it can credit our partner tag.
• Stripe — your payment details, to process the $9.99 unlock; we never see your card number.
• Cloudflare — DNS, and, where enabled, anonymous cookie-free page analytics.

We also keep our own simple visit count on our server, with no cookies and no third-party script. For each page you open, we record the page address, the date and time, the site that linked you to it (if any), and a short scrambled code made from your IP address, your browser's user agent and the date. That code lets us count a visitor once per day; your IP address itself is not stored.

Hotel links in your itinerary go to Trip.com, and ticket links go to a web search for the venue; once you leave PoppaTrip, those sites' privacy policies apply. The booking, payment, cancellation and customer support for a hotel are handled by Trip.com, not by PoppaTrip. Ticket links earn us nothing. We may earn a commission, at no extra cost to you, when you book a hotel (via Trip.com, whose affiliate program adds our partner tag to hotel links), a flight (via Aviasales) or a rental car (via GetRentacar) through the links we show — flights and cars through our affiliate network, Travelpayouts, which adds our partner tag to those two link types. It does not run on the payment page, and it is not an advertising network — we do not sell ad space or share your data with advertisers.

Retention and deletion

Solo trip data: delete it any time by clearing your browser storage. Saved trips (via "Save this trip"): delete the server copy any time with "Forget saved trip," and we automatically remove saved trips after 180 days of inactivity. Group trips and purchase records: kept as long as needed to provide the service and meet accounting obligations. To request deletion of group-trip or purchase data, email us with your trip code or Stripe receipt.

Contact

Privacy questions or deletion requests: admin@goodgaryapps.com