Privacy Policy

Last updated: April 16, 2026

Privacy First Design

Zero tracking, no analytics

No ads, no user behavior analysis

All data stored on your device

GDPR-friendly design

Important: Your data is stored in your browser's IndexedDB. Clearing your browser cache will delete all trip data. We recommend using the Export function regularly to back up your trips.

Payment Processing: Lemon Squeezy acts as our Merchant of Record and handles email and billing. TripBoard itself verifies Pro access via activation code and does not access any trip data.

1. Data We Collect

Local Storage (On Your Device)

  • Trip data (name, dates, spots, expenses, etc.)
  • Checklists and memos
  • Pro activation status and preferences

✓ This data is stored only in your browser's IndexedDB and is never uploaded to any server.

Data Collected During Payment

  • Email address (automatically sent activation code after purchase)
  • Payment information (processed by Lemon Squeezy; we do not store card numbers)

Temporarily Stored During Sharing

  • Trip summary data (for generating share links)

⏱ Free share links expire after 6 hours; Pro/Founder links are valid for 7 days.

2. Third-Party Services

We use the following third-party services to provide certain features:

Lemon Squeezy

Payment processing (one-time purchase)

View Privacy Policy

Resend

Email delivery service (activation code delivery)

Supabase

Share link storage, activation code management

LINE LIFF

LINE card sharing feature

Vercel Analytics

Anonymous traffic monitoring and error tracking. No personal data or cookies. GDPR-compliant.

Vercel Privacy Policy

3. Cookies

TripBoard does not use tracking cookies. We only use technically necessary local storage (LocalStorage, IndexedDB) to store your trip data and preferences. This data is stored entirely on your device.

4. GDPR Compliance

Data Portability

You can export all your data as a ZIP backup file anytime via "Settings → Export Backup". Pro users can optionally enable AES-256 encryption for extra protection.

Right to Erasure

You can delete all local data anytime via "Settings → Clear All Data".

No Account Required

You can use all free features of TripBoard without creating an account.

5. Share Feature Privacy

  • Free share links automatically expire and are deleted after 6 hours; Pro/Founder links are valid for 7 days.
  • Shared data contains only trip summaries, no personally identifiable information.
  • You control what to share (full itinerary, single day, or flight info).

6. Data Security

  • Local data is protected by browser sandboxing.
  • All users can export a ZIP backup; Pro users can enable AES-256 encryption for additional protection.
  • All server communications use HTTPS encryption.

7. Children's Privacy

TripBoard is not designed for children under 13 and does not knowingly collect personal information from children.

8. Policy Changes

We may update this privacy policy from time to time. Significant changes will be communicated through the app. We recommend reviewing this page periodically.

9. Contact Us

For any privacy-related questions, please contact: