Privacy Policy

This policy describes what information travelfortaste collects, how it’s used, and the choices you have. It is written in plain English because legalese tends to obscure rather than clarify.

§ 1 What we collect

Analytics. We use Cloudflare Web Analytics, which is cookieless and server-side. It records page paths, referrers, country (derived from your IP at request time), and basic browser data. Your IP address is not stored.

Affiliate click data. When you click “Book on Viator” or “Book on GetYourGuide” on our site, we record the click in our own database to understand which pages convert. If you’ve accepted our cookie (EU/UK visitors are asked; others are not), this click is linked to a random anonymous identifier; otherwise the click is wholly anonymous.

Subscription & purchase data. If you subscribe ($3/month) or buy a PDF export ($7), we collect your email address and Stripe processes your payment. We store your email, your subscription status, and a Stripe customer ID. We never store card data.

Itinerary inputs. When you generate an itinerary, your inputs (destination, dates, party size, diet, budget) are stored in a cache so we don’t regenerate the same request. The cache is anonymous and does not contain your email unless you’re a subscriber.

§ 2 What we don’t collect

• Your name (unless you tell us).
• Your home address.
• Your real-time location.
• Your specific travel dates.
• Your social media activity.

§ 3 How we use it

• To deliver the service you asked for.
• To understand which pages and tours convert (in aggregate, anonymously).
• To send you transactional emails: receipts, PDF delivery, account notices.

We do not send marketing emails featuring specific Viator or GetYourGuide products. Our affiliate-program rules don’t allow it.

§ 4 Third parties

We share data with the following service providers strictly as needed to operate the site:

• Cloudflare — hosting, analytics, edge data storage.
• Stripe — payment processing.
• Anthropic — AI itinerary generation. Your inputs are sent to Anthropic’s API to generate the itinerary; Anthropic does not retain them for training per their API terms.
• Resend — transactional email delivery.
• Viator, GetYourGuide, Travelpayouts — affiliate networks. When you click an affiliate link, they receive standard browser data from the redirect (referrer, IP).
• Google Places API — restaurant data. Lookups are tied to a city, not to you.
• Unsplash — we self-host all photos (no requests leave your browser to their CDN).

§ 5 Cookies

We use a single first-party cookie called tft_uid to credit affiliate clicks back to this site. EU/UK visitors are asked for consent before it’s set; declining means clicks still work, we just lose attribution detail. Cloudflare may set strictly-necessary cookies for bot mitigation (__cf_bm). See /disclosure for the full list.

§ 6 Your rights

Under the GDPR (EU/UK) and CCPA (California), you have the right to:

• Request a copy of any data we hold about you.
• Request deletion of your data.
• Request correction of inaccurate data.
• Opt out of any non-essential data processing.

Email [email protected]. We’ll respond within 30 days. We will delete your subscriber row and Stripe customer record on request. Anonymous itinerary-cache rows are not personally identifying and auto-expire after 30 days.

§ 7 Children

travelfortaste is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we’ll delete it.

§ 8 Changes to this policy

We may update this policy as the service evolves. Material changes will be announced on the homepage or by email to active subscribers.

§ 9 Contact

Questions go to [email protected].

Last updated · May 2026