Privacy policy
Last updated: 13 November 2026
Travel Journal lets you keep a journal of your trips and share it with friends. This page explains what personal data we keep, why, who helps us run the site, and your rights. We collect as little as we can: no advertising, no tracking, no analytics.
Who we are and how to reach us
Travel Journal is run by Nicolas Martiquet, who is responsible for your data (the "data controller"). For any question or request about your data, write to:
What we keep
Your account: your email address. It is needed to have an account, and is used to send you sign-in links and, rarely, important notices about this service. We send no newsletters or advertising.
What you write: your trips (title, destination, dates, names of fellow travellers), days, places, ratings, comments and photos. Photos are shrunk on your device and their hidden data, such as the place they were taken, is removed before upload. Fellow travellers are other people: please enter only names they would be happy with, such as first names.
For places you add, we keep Google's place id. Their address and position come from Google and are refreshed or deleted within 30 days, as Google's terms require.
Technical logs: like any website, our hosting providers record technical data such as IP addresses and the pages requested, to keep the site running and secure. These logs are kept for a short time.
Why, and on what basis
To provide the service you asked for: keeping your journal and showing it to the people you share it with (performance of our agreement with you).
To keep the site secure and working (our legitimate interest).
To show maps and the place search through Google Maps, on your pages and on share pages (our legitimate interest in a useful journal; see below). We make no automated decisions about you.
Sharing
Your trips are private. They are only visible through a share link that you create, and anyone with the link can see the trip, its places, comments and photos. Turning the link off stops the page from working. The names of your fellow travellers are never shown on share pages.
Photos are stored at long random addresses that cannot be guessed. Someone who saved a photo's address while a trip was shared may still open that photo until you remove it. Please only share photos of people who agree to it.
Who helps us run the site
Supabase (database, sign-in, sign-in emails and photo storage). Your data is stored in the European Union.
Vercel (website hosting). The site's servers run in Frankfurt, Germany; pages are delivered through Vercel's worldwide network.
Google Maps (maps and place search). When a page shows a map or the place search, including share pages seen by your friends, the browser connects to Google, which receives the IP address and what is typed in the search box, and may use cookies under its own privacy policy: https://policies.google.com/privacy
Supabase, Vercel and Google are companies based in the United States. Transfers of personal data to them are covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses in their data processing terms. We do not sell your data or share it with anyone else.
Cookies
We only use the cookies needed to keep you signed in. They are strictly necessary, so the law does not require asking for consent. Visitors of share pages get no cookies from us. We use no advertising or analytics cookies. Google Maps may set its own cookies, as explained above.
How long we keep it
Your data is kept until you delete it or your account. Deleting a place, a trip or your account removes it from our database at once, including your sign-in history; a deleted photo may stay reachable at its old address for up to an hour. Our providers’ technical logs and any backup copies are erased within 30 days.
Your rights
You can see, correct and delete your data at any time in the site. On your Account page you can download all your data as a file and delete your account with everything in it.
You also have the right to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to the address above; we answer within one month.
If you think your data is mishandled, you can complain to your data protection authority (in France, the CNIL: https://www.cnil.fr).
Age
Travel Journal is for people aged 15 or over.
Changes
If this policy changes, we will update this page and its date, and tell account holders by email of any important change.