Privacy Policy

Who we are

The data controller is TRIPFISH, LLC, a Limited Liability Company registered in Delaware, USA, with its principal place of business in Brooklyn, NY. Reach us at hello@trip.fish.

What we collect

We do not require an account and we do not ask for your name, address, or payment details.

Analytics

We use Google Analytics 4 (Google LLC) and PostHog to understand which itineraries people read and which links they follow. These tools collect your IP address, approximate location derived from it, browser and device type, referring page, pages viewed, and interactions such as clicking a customization chip or a booking link. They set cookies and similar identifiers in your browser.

Local storage

We store a small flag in your browser's localStorage to remember that you have already unlocked a full itinerary, so you are not asked again. It stays on your device and is never sent to us.

Email address (currently not collected)

The email unlock form is currently disabled and no email addresses are being collected. If we re-enable it, we will use any address you enter only to deliver the itinerary you asked for and, where you agree, occasional trip planning email — and we will update this policy before doing so.

Server logs

The site is served by Cloudflare Pages, which logs requests — including IP address and user agent — for security and abuse prevention.

Why we are allowed to use it

Where the GDPR or UK GDPR applies, we rely on our legitimate interest in operating, securing, and improving the site for analytics and server logs, and on your consent for anything you voluntarily submit, such as an email address. Where local law requires consent before analytics cookies are set, we will obtain it before those tools run.

Who we share it with

We do not sell personal data. We share it only with the processors that make the site work:

• Google LLC — Google Analytics 4, for traffic measurement.
• PostHog — product analytics, for the same purpose.
• Cloudflare, Inc. — hosting and content delivery.
• AWIN and Booking.com — when you click a booking link, the affiliate network records the referral so any commission is attributed to us. Once you leave our site, their privacy policies apply, not ours.

We may also disclose data if required by law, or to protect our rights or the safety of our users.

International transfers

We operate from the United States and our processors may store and process data there and in other countries. Where data is transferred out of the EEA or the UK, our processors rely on Standard Contractual Clauses or an equivalent approved transfer mechanism.

How long we keep it

Analytics data is retained according to each provider's default retention window — currently up to 14 months for Google Analytics. Any email address you give us is kept until you ask us to delete it. Server logs are retained on Cloudflare's standard schedule.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict how we use it, and to withdraw consent at any time. California residents additionally have the right to know what is collected and to opt out of any "sale" or "sharing" of personal information — we do neither.

To exercise any of these, email hello@trip.fish. We will respond within 30 days. You can also block cookies in your browser, use Google's Analytics opt-out add-on, or send a Global Privacy Control signal.

Children

This site is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us information, email us and we will delete it.

Changes

If we change this policy we will update the date at the top of this page. Material changes will be announced on the site before they take effect.