Your data,
handled with care.

1. Who we are

The data controller is Flâneur Travel, VAT number IT02655931208. For any question about your data, or to exercise the rights described below, write to theintrovertraveler@gmail.com.

2. What data we process

• Account data. Your email address, and an authentication password stored in hashed form by our authentication provider. Used to create your account and let you sign in.
• Purchase data. A record of which itineraries you have bought, linked to your account. Payments themselves are handled by Stripe; we do not receive or store your card details.
• Itinerary preferences. The choices you make in the wizard, such as city, profile, and interests, used to generate your itinerary.
• Feedback you send. If you use our feedback form, we process your message and, if you choose to give it, your email address, so we can read your report and reply.
• Usage data. Aggregated, anonymous analytics about site traffic. This is cookieless and does not identify you.

3. Why we process it, and on what legal basis

• To run the service and your account. Legal basis: performance of a contract with you.
• To process payments and keep the required records. Legal basis: performance of a contract and compliance with our legal and tax obligations.
• To read and answer your feedback. Legal basis: our legitimate interest in improving the service and responding to you.
• To understand how the site is used. Legal basis: our legitimate interest in improving the service. This relies only on anonymous, aggregated data.

4. Cookies

We do not use profiling cookies of our own, and our analytics is cookieless, which is why you do not see a cookie banner. Third-party services you interact with may set their own cookies under their own policies, for example Stripe during checkout, or an affiliate partner when you click one of its links.

5. Service providers and third parties

We rely on a small set of providers, each acting under its own terms and privacy policy:

• Supabase, for database and authentication.
• Stripe, for payment processing.
• Vercel, for site hosting and cookieless analytics.
• Web3Forms, for delivering the messages you send through our feedback form.
• Affiliate partners, such as Aviasales, Airalo, Tiqets, GetYourGuide, and Booking, reached in some cases through TradeTracker. When you click an affiliate link, that partner may track the click under its own privacy policy.

6. Transfers outside the European Union

Some of these providers may process data outside the European Union. Where that happens, appropriate safeguards apply, such as the Standard Contractual Clauses approved by the European Commission.

7. How long we keep your data

We keep account and purchase data for as long as your account is active and for as long as we are required to for legal and tax purposes. Feedback messages are kept only as long as needed to handle them. Anonymous analytics data cannot be linked back to you.

8. Your rights

Under the GDPR you have the right to access your data, and to ask us to correct it, erase it, restrict its use, port it elsewhere, or object to certain processing. To exercise any of these, write to theintrovertraveler@gmail.com and we will respond within the legal time limits.

9. How to complain

If you believe your data has been handled improperly, you can lodge a complaint with your local data protection authority. In Italy this is the Garante per la protezione dei dati personali, at garanteprivacy.it.

10. Changes to this policy

We may update this policy as the service evolves. The date below always reflects the current version.