Your plans deserve clear boundaries.

The short version, in one breath.

We do not run ads or sell your data. Public browsing uses cookie-free Cloudflare Web Analytics for page-use and performance measurements. Signed-in planning stores the trip basics described below in Supabase. When you ask for live AI help, the necessary trip constraints and grounded catalog context are sent through our Worker to Anthropic so Claude can draft a plan or reply. We do not send your email address to the model.

What stays in your browser.

If you use a public EaseAway page without signing in, the following planning data is kept in localStorage on your device unless you deliberately enter a signed-in planner or request a live service:

• Your trip itinerary (destinations, hotels, activities, restaurants).
• Your family profile (size, kids' ages, dietary preferences, accessibility needs, rhythm — wake / cutoff / bed times).
• Your loves and avoids (activity preferences for personalization).
• Saved hotels, filter state, favorites.
• An anonymous event log (capped at 500 events per device — powers rhythm self-tuning, never includes PII like email, name, address, phone).

Clearing browser storage removes the local copy. Ordinary page requests and the cookie-free performance beacon still reach Cloudflare as described in Sections IV and V.

If you choose to sign in.

Public destination and camping guides can be browsed without an account. The hotel and trip-planning workspaces currently require account sign-in by magic link. When you sign in:

• Your account profile and supported trip basics are uploaded to a private Supabase database. Some detailed checklist, budget, and grocery progress may remain on the current device until cross-device coverage is expanded.
• Your email identifies the account. The private planning state can also include preferences you enter, approximate home context such as city, state, or ZIP, family size or age bands, accessibility and dietary needs, and supported trip details. We do not require a full name or phone number.
• Row-level security ensures no one can access your data except you, authenticated with your email.
• You can sign out at any time. Local data on your current device continues to work normally.
• You can request full deletion of your cloud-stored data through the private data-deletion form.

You choose whether to enter the account-only workspaces. Public field-guide browsing remains available without signing in.

Cookies and tracking.

EaseAway does not set advertising or analytics cookies. It uses local storage for the on-device planning state described above.

We use Cloudflare Web Analytics, a cookie-free performance beacon that measures page views and Core Web Vitals. Cloudflare states that Web Analytics does not collect or use visitors’ personal data and does not track individuals across customer sites. We do not use Google Analytics, Facebook Pixel, Meta Conversions API, or TikTok Pixel.

Third-party services we touch.

EaseAway currently relies on the following services. A feature only sends the information needed for that request:

• Google Places API — used by us, on our servers, to populate hotel / attraction / restaurant details and photos. Place IDs and place data flow from Google to us; no user data goes the other way.
• Google Maps — opens in a new tab when you click "Get Directions" or "View on Map." From that point you're on Google's site, governed by Google's privacy policy.
• OpenStreetMap Nominatim — typed location search and reverse geocoding can send a place query or coordinates so EaseAway can resolve an origin. Do not enter a private street address when a city or ZIP is sufficient.
• MapLibre and OpenFreeMap — render the in-app map. Your browser requests map styles and tiles from the map provider, which can receive ordinary network information such as your IP address.
• Google Fonts — we load the Fraunces and Inter typefaces from fonts.googleapis.com. Google sees a request from your IP for a font file. No identifying info beyond that.
• Cloudflare — hosts the public site and API Worker, routes live AI requests through AI Gateway, and supplies cookie-free Web Analytics. Page and performance measurements are processed by Cloudflare; the analytics beacon does not use cookies or local storage.
• Anthropic Claude — processes real-time trip-helper and AI-itinerary requests. It receives the conversation or explicit trip constraints plus grounded catalog context needed to answer, but not your email address or account identifier.
• Google Gemini AI — used in advance to prepare review-derived category evidence. Your browsing does not trigger that pipeline. A live Gemini backup is not currently enabled.
• Supabase — hosts email-based authentication and synced trip data when you sign in. It also hosts the restricted contact-request queue when you deliberately submit the contact form, whether or not you are signed in. A contact submission stores the fields listed in Section X. Subject to Supabase's privacy policy.
• Stay22 and booking partners — when you deliberately follow a hotel booking link, the partner receives the normal link and browser request information. EaseAway does not process the reservation or payment.
• OpenWeather — when configured and requested, the Worker may send destination coordinates to request forecast data. If weather is unavailable, EaseAway leaves it unavailable rather than inventing a forecast.

We do not use SearchAPI or any other third-party data broker. (An earlier version of EaseAway sourced data via SearchAPI; that pipeline has been retired.)

Data sharing.

We never sell or rent your data, and we do not share it for marketing or advertising. We send only the data needed for a feature to the processors listed in Section V: account and supported trip state or a contact request you deliberately submit to Supabase; live AI request context to Anthropic through Cloudflare; page and performance measurements to Cloudflare; place queries or coordinates to location, map, and weather providers when those features are used; and booking-link requests to a partner only after you choose that link.

Children's privacy.

EaseAway accounts are intended for adults planning family trips. We do not ask children to create accounts. If an adult enters children’s ages or age bands, those values can be stored in that adult’s local or signed-in trip state and may be included in a live AI request when needed to make the requested family plan. Do not enter a child’s name, contact details, school, or other identifying information.

Email communications.

Supabase can send account messages you request, such as a magic sign-in link or password reset. EaseAway does not currently operate a public marketing or price-alert mailing list. If that changes, enrollment and unsubscribe controls will be shown before any promotional email is sent.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.

Contact Us

The private contact form stores the request type, reply email, message, source page, processing status, the accepted storage-disclosure version and time, and an account identifier when one is securely available. Contact requests are not sent to an AI model or exposed to browser database roles.

We retain a request while it is being reviewed and for only as long afterward as reasonably necessary to document the response, protect the service, or meet legal obligations. We delete or de-identify it when those purposes no longer apply. EaseAway does not currently promise a fixed automatic deletion date for these operational records.

If you have questions about this privacy policy, use the private contact form.