Privacy policy
Who we are
MyTripTo AS (org. no. 936 366 384, Øvre Markveg 8b, 9011 Tromsø, Norway) runs mytripto.no and is responsible for the personal data described here. For any privacy question, email info@mytripto.no.
The short version
You don’t need an account to use MyTripTo, and we don’t ask for your name or email to build a plan. Our site sets no cookies and shows no ads. We count page visits with Vercel Web Analytics, which uses no cookies and can’t identify you. We don’t store your trip plan on our servers.
What happens when you build a plan
To write your plan, we send the trip details you choose to Anthropic’s Claude API: your travel dates, how many adults, children and babies are travelling (and the children’s ages, if you enter them), your preferred pace and the interests you tick. We never send your name or contact details, and there’s no free-text field. Anthropic processes this data on our behalf, and under its commercial terms it doesn’t use it to train its models.
Your plan and your choices are kept in your browser’s session storage for the tab you’re using. This lets the planner remember your plan while you move between pages. It is deleted when you close the tab, it isn’t a cookie, and we can’t read it from our side.
When you click a “Book with …” button
You leave MyTripTo and book directly on the partner’s own website. The link carries our referral code, so the partner can see that you came from us. After that, the partner’s own privacy policy and terms apply, and their site may set its own cookies.
On our side we record the click itself: which partner and activity, the date you planned it for (if there is one), where on our site you clicked, and the time. We don’t record who you are. We use these records to see which activities people choose and to settle commission with partners.
The map
Map tiles load directly from OpenStreetMap’s servers. Like any website, those servers see your IP address. See the OpenStreetMap Foundation’s privacy policy.
Counting visits
To see which pages people use, we count page views with Vercel Web Analytics. For each view it records the page, the site you came from, your approximate location, and your browser, operating system and device type. It sets no cookies and doesn’t store your IP address. A visitor is recognised only by a code made from the request, which is discarded after 24 hours. Vercel processes this data on our behalf.
Server logs
Our host, Vercel, logs technical data for each request: IP address, browser type, the page requested and the time. Vercel keeps these logs for a short period, and we use them only to keep the site running and secure.
When you email us
If you email us, we use your message and address to reply. We keep the correspondence as long as needed for that purpose, and longer only if it becomes part of our accounting records, which Norwegian bookkeeping law requires us to keep.
Our legal basis
- Building the plan you ask for: to provide the service you request (GDPR Art. 6(1)(b)).
- Server logs, click records and security: our legitimate interest in running a secure, working service and in settling with partners (Art. 6(1)(f)).
- Counting page visits: our legitimate interest in knowing which pages people use (Art. 6(1)(f)).
- Replying to email: our legitimate interest in answering you (Art. 6(1)(f)).
Service providers and transfers
We use these providers to process data on our behalf:
- Vercel (hosting and visit counting, USA)
- Supabase (database, EU – Ireland)
- Anthropic (AI plan writing, USA)
Where data leaves the EEA, the transfer is covered by the EU–US Data Privacy Framework or the EU’s standard contractual clauses. We don’t sell personal data, and we don’t share it with partners. Partners only see what you give them yourself when you book on their site.
Your rights
You can ask to see, correct or delete personal data we hold about you. You can also object to or restrict how we use it, and ask for a copy you can take elsewhere. Email info@mytripto.no and we’ll answer within one month. Because we hold so little, there will often be nothing that identifies you. If you think we’ve handled your data wrongly, you can complain to Datatilsynet.
Changes
If this policy changes, we’ll update it here and change the date at the top.