Privacy Policy

Information we collect

• Your email address, which identifies your account.
• Your name, if you choose to provide one. This is optional.
• A cryptographic hash of your password. We never store your password itself.
• Trips you create, including destination, dates, and any preferences you add such as budget, currency, pace, interests and walking limits.
• Arrival and departure details you save, including times and the place you selected, with its coordinates.
• A basic record that a visit happened, linked to a randomly generated visitor identifier rather than to your identity.
• Technical information needed to serve the site, such as the request your browser makes to our servers.

Why we collect it

Account information lets you sign in and keeps your trips associated with you. Trip information exists so the service can store and display your plans. Visit records give us a rough sense of how much the site is used.

How we use it

We use your information to operate the service: to authenticate you, to save and show your trips, and to understand general usage levels. We do not sell your information, and we do not use it for advertising.

Cookies

We use a small number of cookies, described in detail in our Cookie Policy. In short: one cookie keeps you signed in, and one randomly generated identifier lets us count visits.

Analytics

We use Google Analytics to understand aggregate usage, such as which pages are viewed. Google Analytics is loaded on all pages and sets its own cookies under Google’s control.

Third-party services

When you search for a place, your search text is sent to the Google Places API from our servers so we can return suggestions and coordinates. We also use Google Analytics. These services process data under their own privacy policies.

Data retention

Your account and trip information is kept while your account exists. The visitor identifier cookie expires after 24 hours. We have not yet defined fixed retention periods for other records, and we will state them here once we do.

Security

Passwords are stored only as hashes. Authentication uses a cookie that JavaScript cannot read, and it is marked secure in production. No service can promise perfect security, but we aim to keep the amount of information we hold small.

Your rights

You can view and change your trips at any time through the application. If you want your account or data removed, contact us and we will handle the request. Depending on where you live, you may have additional rights over your personal data.

Changes to this policy

PingWinWin is under active development, so this policy will change as the product does. Any update will be reflected in the "last updated" date above.

Contact

If you have a question about this policy, please use the details on our contact page.