Privacy policy

Last updated July 27, 2026

You can use Gate36 without an account

If you do not sign in, your trip stays in your own browser’s local storage and never reaches our servers. We keep three items there:

  • vacation_planner_v0_2 — your trip data while you are working as a guest.
  • gate36_saved_tips — which travel tips you have bookmarked.
  • gate36_onboard_v1_done — whether you have already seen the welcome tour.

Clearing your browser data clears all three. As a guest, that is the only copy — so export anything you want to keep.

What we collect if you sign in

  • Account. You sign in with Google. We receive your email address, your name, and your profile picture URL from Google. We never see your Google password.
  • Profile. Whatever you choose to set: display name, username, avatar, and your background colour or image.
  • Trips. The itineraries, bookings, packing lists, shopping lists, and budgets you build. Stored so they sync across your devices.
  • Travel Log. Posts, comments, and reactions you publish, plus any images you upload with them. These are visible to other signed-in users — that is the point of the feature.
  • Feedback. Messages you send through the in-app feedback form.
  • Moderation. If an admin hides or removes content, that action is logged for accountability.

Analytics

We use Google Analytics 4 to see which pages get read and roughly where readers come from. It is configured for aggregate reporting — page views, referrers, general region, device type. We do not use it to build advertising profiles, and we do not connect it to your Gate36 account. You can opt out with Google’s browser add-on or by blocking analytics in your browser; the site works identically either way.

Affiliate links and cookies

Some articles contain affiliate links. Clicking one may set a cookie belonging to that merchant, which lets them credit us if you buy. That cookie is theirs, not ours, and is governed by their privacy policy — we never receive your name, payment details, or what you bought. We only see aggregate click counts and, if a sale happens, that one occurred.

Blocking third-party cookies stops this entirely. Full details on our affiliate disclosure page.

Who else touches your data

  • Supabase — authentication, database, and image storage. This is where signed-in data lives.
  • Cloudflare — site hosting and email routing for our contact address.
  • Google — sign-in (OAuth), Analytics, and web fonts.
  • jsDelivr — the code library that connects the site to Supabase.
  • OpenStreetMap and Carto — map tiles on the planner. They see the map area you are looking at, not your itinerary.

Each is a service provider processing data on our behalf. None of them is given your data to use for their own marketing.

What we do not do

  • We do not sell or rent your personal data. Not to advertisers, not to data brokers, not to travel companies.
  • We do not run ad networks or retargeting pixels.
  • We do not read the contents of your trips to market to you or to anyone else.
  • We do not email you marketing you did not ask for.

Your controls

  • Export. The planner exports any trip to Excel at any time. Your data is meant to leave with you.
  • Edit. Profile and trip data can be changed or removed from inside the app.
  • Delete. Email [email protected] to have your account and its data deleted. Say so in the message and we will confirm when it is done.
  • Access. Ask us for a copy of what we hold on you and we will send it.

Depending on where you live, you may have additional rights over your data under local law — access, correction, deletion, portability, or objection. Write to us and we will honour them regardless of jurisdiction; it is simpler than checking.

How long we keep things

Account, profile, and trip data are kept while your account is open, and deleted when you ask us to delete it. Travel Log posts stay up until you remove them. Analytics data follows Google’s standard retention. Feedback messages are kept while we act on them.

Security

Data is transmitted over HTTPS and stored with row-level access rules so one account cannot read another’s trips. No system is perfectly secure, and we will not pretend otherwise — but we do not store payment details, because we do not take payments.

Children

Gate36 is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.

Changes to this policy

When this policy changes materially — a new category of data, a new provider, a new commercial relationship — we update the date at the top and note what changed. We will not quietly broaden it.

Contact

Questions, requests, or complaints: [email protected].

← Back to the planner