Privacy Policy

What Travel Pal does

Travel Pal is a free offline-capable travel companion. It shows phrasebook audio and a currency calculator for 12 destination countries. No account or sign-up is required.

Cookies we set

All cookies are first-party (scoped to travelpal.byjed.com only) and serve preferences or anonymous analytics. No third-party tracking or advertising cookies are set.

All cookies use SameSite=Lax and Secure on HTTPS. The 7 preference cookies are read and written entirely in your browser. Theph_travelpal_did cookie holds an anonymous UUID; only that UUID is included in analytics event payloads sent to PostHog EU.

Analytics

Travel Pal uses PostHog (EU-hosted at eu.i.posthog.com) for anonymous usage analytics. PostHog is configured with session recording disabled. No personal identifiers are collected; no third-party tracking cookies are set. Data is retained on PostHog EU servers per their privacy policy.

Device-stable pseudonymous ID: a randomly-generated UUID is stored in your browser'slocalStorage and a first-party cookie (ph_travelpal_did), both scoped only to travelpal.byjed.com. The UUID is pseudonymous (not directly identifying you) and lets us measure how often returning travelers come back for their next trip (retention) without ever learning who you are. The ID never leaves your browser except as part of analytics events sent to PostHog EU.

How to opt out: clear site data for travelpal.byjed.com via your browser's settings (this clears ph_travelpal_did and stops PostHog from receiving further events from your device until you visit again). Most browsers also have a global "block all cookies and storage" toggle that prevents the ID from being created in the first place. We do not currently show a consent banner because the analytics ID is pseudonymous and used only for anonymous usage measurement; if you prefer a banner-based opt-in, email jed@byjed.com.

Analytics data is retained for 24 months, after which it is automatically deleted.

Legal basis: Legitimate Interest (GDPR Art. 6(1)(f)). Analytics data is fully anonymous and contains no personal identifiers. The legitimate interest is improving the app based on aggregate usage and retention patterns.

Vercel Analytics

Travel Pal uses Vercel Analytics (by Vercel Inc.) for web performance monitoring. On every page load, the following data is sent to vitals.vercel-insights.com:

• Page URL and HTTP referrer
• Browser type and version
• Device type
• Country (derived from IP address, IP itself is not stored)

No cookies are set. No personal identifiers are collected. Data is processed on Vercel infrastructure (US-based, with EU routing where available). Transfers rely on Vercel's Data Processing Agreement and the EU-US Data Privacy Framework. See Vercel Analytics privacy policy.

Vercel retains analytics data for up to 36 months per their data processing agreement.

Legal basis: Legitimate Interest (GDPR Art. 6(1)(f)). The data is anonymous, cookieless, and used solely to understand how the app performs. Vercel Analytics cannot be individually opted out of. If you prefer not to be included, do not visit the site.

Country detection

When you open the home page online and no destination is saved on your device (in the destination cookie or its localStorage copy), the app asks our own server for your approximate country, at most once per visit. Vercel, our hosting provider, works out the country from your connection, as part of serving the request. Our server sends back only the two-letter country code. No other company is involved, and our server does not store or log your IP address or the country code. The only thing kept is the destination you end up with, on your device (see below). Offline, nothing is sent.

If your country is one of our destinations, that destination is selected and saved on your device, in the destination cookie (10 years) and a localStorage copy (no expiry). The localStorage copy restores the cookie if the cookie is cleared, so the saved destination stays until you clear both. If your country is not one of our destinations, the default destination (Thailand) is saved instead, so detection does not run again. If detection fails, nothing is saved and the next visit tries again.

To avoid detection, pick a destination yourself, or use the app offline. A destination you pick is saved the same way, replaces a detected one, is kept if you pick it while detection is still running, and stops further detection while it stays saved. To remove it, clear this site's data (cookies and local storage) in your browser.

Legal basis: our legitimate interest (GDPR Art. 6(1)(f)) in opening the app on the destination you are most likely in, or on Thailand if your country is not one of our destinations. Detection runs only until a destination is saved, only the country code is used, and nothing is stored on our server.

The request is processed on Vercel infrastructure (US-based, with EU routing where available). Transfers rely on Vercel's Data Processing Agreement and the EU-US Data Privacy Framework, as for Vercel Analytics above.

Data we do not collect

• No account, email, or name
• No location kept beyond the country (the browser geolocation API is not used)
• No microphone or camera access
• No payment data
• No data sold or shared with advertisers

Data controller

Travel Pal is operated by Jed Tabaczynski, an individual based in Poland. For data subject requests (access, correction, deletion, portability, or objection), use the contact form at byjed.com. Requests are processed within 30 days per GDPR Art. 12(3).

Third-party recipients

The following third parties may receive or process data in connection with Travel Pal (GDPR Art. 13(1)(e)):

• Analytics provider: PostHog Inc. (EU servers), processes anonymized usage data.
• Hosting provider: Vercel Inc. (US, with EU routing), serves the application, collects basic analytics, and works out your approximate country from your connection for country detection.

No data is sold to third parties. No data is shared for advertising purposes.

Your rights (GDPR)

Under GDPR you have the following rights regarding your personal data:

• Right of access (Art. 15): request a copy of your data.
• Right to rectification (Art. 16): correct inaccurate data.
• Right to erasure (Art. 17): request deletion of your data.
• Right to restriction of processing (Art. 18): request that we limit how your data is processed.
• Right to data portability (Art. 20): receive your data in a machine-readable format. Since Travel Pal stores no personal data server-side, this applies only to cookies and local storage in your browser.
• Right to object (Art. 21): object to processing based on legitimate interest. If you object, we will stop processing your data unless compelling legitimate grounds override your interests.
• Right to lodge a complaint (Art. 77): file a complaint with a supervisory authority. For Poland, the supervisory authority is UODO (Urząd Ochrony Danych Osobowych, uodo.gov.pl). You may also contact your local EU/EEA data protection authority.

Since Travel Pal stores no personal data server-side, you can exercise most rights locally by clearing this site's cookies and local storage in your browser settings.

Contact

For questions about this privacy policy or to exercise your GDPR rights, use the contact form at byjed.com.