Privacy & Terms

What stays on your device (most things)

• Your checklist and progress — Your trip, ticked items, and category choices live in your browser's storage on your device. They are not sent to us unless you choose “Save & get alerts”.
• Your documents — Passport scans, tickets, and anything you add to the on-device document locker are stored only on your device. They are never uploaded, never leave your browser, and we could not read them if we wanted to. Clearing your browser data deletes them.

What we store if you save your trip (only then)

• Your email address, destination, travel dates, and passport nationality — Stored securely so we can send you what you asked for: a resume link, and an alert if your destination's official travel advisory changes — that advisory alert works for anyone, no account needed. Countdown reminders before departure are the one thing that requires a free account, so they can follow you across devices.
• Every alert email has an unsubscribe link — One click stops them. Saving a trip again re-subscribes you. You can also ask us to delete your data entirely, any time, for any reason.

Cloud vault — Trip Pass, Annual, and Team travelers only, and only if you use it

• An optional backup copy of your documents — Signed-in Trip Pass, Annual, or Team travelers can choose to also back documents up to an encrypted cloud vault, so they're reachable from any device you sign into — separate from, and in addition to, the free on-device locker above. Nothing is backed up unless you tap "Back up a document" yourself.
• Stored in a private Supabase Storage bucket — Encrypted at rest and in transit, never a public link. Files are only ever served to you via a short-lived, single-use signed link generated at the moment you download, and only your own account can ever reach your own folder.
• Deleting a backed-up document removes it immediately — "Remove" in the cloud vault deletes the file itself, not just the listing.

Resume links carry your trip

• A resume link contains your trip details encoded in the address itself — That's what makes it work on any device with no account. Treat it like a boarding pass: anyone you share it with can open your checklist (on-device documents excluded — those stay on the device you added them from; anything you've explicitly backed up to the cloud vault instead follows your account, not the link).

Services we rely on

• Vercel — hosts the app and keeps standard server logs.
• Supabase — stores saved trips (the email + trip details above), account sign-in, and — only for travelers who choose to use it — the cloud vault's encrypted document storage.
• Stripe — processes payment for Trip Pass and Traveler Annual. We never see or store your full card number — Stripe handles that directly and we only receive confirmation that a payment succeeded.
• Resend — delivers our emails.
• Plausible — counts page views so we know which parts of the app get used. It is cookieless and anonymous — it records that a page was opened, never who opened it, and cannot follow you to any other website.
• Open-Meteo — provides weather data — it receives a city name and dates, never anything about you.
• Nager.Date — provides public-holiday data — it receives a country code, nothing else.
• Official sources we link to — (government sites, airlines, tourism boards) have their own privacy policies once you click through.

What we don't do

• No advertising scripts, and no tracking that follows you — The only analytics here is Plausible, which is cookieless and anonymous — it counts pages, not people. Nothing profiles you, and nothing follows you to another site. That is also why this app never asks you to accept cookies.
• We never sell your data — To anyone. Ever.
• No card numbers touch our servers — Payment goes straight to Stripe, a PCI-compliant processor — we never see or store your full card number.
• Booking links — If the app ever includes clearly-marked links to booking platforms that pay us a commission, it never changes what you pay — and we'll say so right where the link is.

Your rights

Ask for a copy of any data we hold on you, or ask us to delete it — any time, for any reason — by emailing hello@triphappenstravel.com. We'll confirm within 30 days. If you're in the EU, UK, or California, your additional rights under GDPR / UK GDPR / CCPA are all honoured. TripHappens is not directed at children under 13 and we do not knowingly collect their data.

Terms of use, briefly

TripHappens routes you to authoritative sources — it doesn't publish or replace them. Entry rules, advisories, and health guidance change without notice, so always verify with the official source before you book or travel; the live source is always the source of truth. The app is provided as-is, without warranty; we work hard to keep links healthy and alerts timely, but your travel decisions (and their outcomes) remain your own. If any of this changes, we'll update this page and the date at the top.