Privacy Policy
Last updated: October 28, 2026
This Privacy Policy explains what information we collect when you use the Service, how we use and disclose it, and the choices and rights you have.
We use your Personal Data to provide and improve the Service. We collect, use, and disclose it only as this Privacy Policy describes and, where the law requires one, only with a valid legal basis, including your consent where consent is required. Our Terms of Service govern your use of the Service.
Definitions
Capitalized terms have the meanings below, whether singular or plural.
- Account means the account created for you to use the Service.
- Company, we, us, and our mean Nominal Research LLC, 2261 Market St. #2393, San Francisco, CA 94114.
- Cookies are small files that a website stores on your Device.
- Device means any device that can access the Service, such as a computer, phone, or tablet.
- Member means an individual with an active Account, including a guest invited to a single trip.
- Personal Data (or “Personal Information”) is any information that relates to an identified or identifiable individual. We use the two terms interchangeably unless a law uses a specific one.
- Service means Puffin, the trip planner at https://puffin.travel, together with its browser extension and its connections to the AI assistants and other apps you authorize.
- Service Provider means a company or individual that processes Personal Data on our behalf: to host or operate the Service, to provide part of it, or to help us analyze how it is used.
- Usage Data means data collected automatically when the Service is used, such as how long a page visit lasts.
- You means the individual using the Service, or the company or other legal entity on whose behalf that individual uses it.
Information We Collect
Information You Provide
- Account information: your name, your email address, and the passkeys you register. You can sign in with a passkey or with a one-time link we email you. We receive only a passkey’s public key, never its private key.
- Trip content: the trips, places, visits, notes, reservations, tickets, and travel documents you or other Members add, including the names of the travelers on a booking. If you add information about another person, make sure you have their permission.
- Traveler profile: the details you add so trips can be planned around you, such as your age, the passports you hold, the languages you speak, what you eat, how you like to travel, where you live, and notes. Do not add passport or other document numbers.
- Imported content: when you use the browser extension to import trips from Wanderlog, the extension reads the list of trips in your Wanderlog account, including trips others have shared with you, so you can choose. It sends us only the trips you choose and the booking confirmation emails attached to them.
- Location: your Device’s location, only when you ask the Service to replan your day from where you are. We save that location with the trip as the point the replanned day starts from, so the people you plan with can see it. It stays until that day is replanned again, its first stop moves to another day, or the stop or trip is deleted.
- Correspondence: what you send us when you contact us for support.
Usage Data
We collect Usage Data automatically, including your Device’s Internet Protocol (IP) address, browser type and version, operating system, the pages you visit, the time and date of each visit, the time spent on each page, the elements you click, page-load performance, errors, and device identifiers.
When an app you connect uses the Service, we record each request it makes and the Service’s full response, including the trips, traveler profiles, and other content they contain, together with the reason the app gives for each request, the app’s name and version, and an identifier for the conversation. We link these records to your Account and send them to PostHog, our analytics Service Provider.
Before you sign in, we collect only page views and page-load performance, and we do not record sessions.
We also record sessions. A recording captures what you see on the page and how you move through it, which can include trip content and anything else shown on the screen.
Cookies and Similar Technologies
We use Cookies and your browser’s storage. You can set your browser to refuse Cookies or to tell you when one is sent. If you refuse them, you will not be able to sign in.
Persistent Cookies stay on your Device after you close your browser; session Cookies are deleted when you close it. We use:
| Kind | Type | Administered by | Purpose |
|---|---|---|---|
| Necessary | Session and persistent Cookies | Us | Keep you signed in and protect your Account from fraudulent use. The Service cannot work without them, and we use them only to provide it. |
| Functionality | Browser storage | Us | Keeps copies of your trip list, your most recent trips, and your workspaces on your Device so pages open at once, and remembers your current workspace and which passkeys this Device has saved. The Service does not use a copy more than 30 days old. All copies are deleted when you sign out. |
| Analytics | Persistent Cookies and local storage | PostHog, our analytics Service Provider, through our own domain | Measure how the Service is used, record sessions, and report errors, so we can fix problems and improve the Service. |
Do Not Track and Tracking by Third Parties
We do not track you across other websites, and we do not respond to browser “Do Not Track” signals. Our analytics run only on the Service.
No third party collects Personal Data through the Service about your activity over time and across other websites. Google provides maps, place search, and routes: your browser sends Google your IP address, the maps it loads, and the place searches you type, and our servers send Google search text and the start and end points of routes between places on a trip, without your name or email address. Google handles what it receives under Google’s Privacy Policy.
How We Use Personal Data
We use Personal Data to:
- provide and maintain the Service, including monitoring how it is used;
- manage your Account and your membership;
- contact you by email about your Account, invitations, security, and changes to the Service;
- respond to your requests;
- evaluate or complete a business transfer, such as a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or in a bankruptcy, liquidation, or similar proceeding, in which Personal Data about our users is among the assets transferred;
- analyze and improve the Service, including identifying usage trends and measuring our marketing; and
- send you news and offers about the Service, only where the law permits. Where the law requires prior consent (for example, in the EEA and the UK), we send them only with your consent. Otherwise we may send them until you opt out. You may opt out at any time through the unsubscribe link in any marketing email or by contacting us.
How We Disclose Personal Data
We do not sell Personal Data. We disclose it only:
- To the people you plan with: a trip and its content are visible to the members of the trip’s workspace and to any guests invited to that trip, and so are your name, the changes you make to the trip, and the parts of your traveler profile that planning needs. Some details in your traveler profile are visible only to you: we use them on our servers to check whether a trip is ready, and the people you plan with see only the result, such as a warning.
- To the apps you connect: when you authorize an AI assistant (such as Claude or ChatGPT) or another app, it can read and change everything your Account can reach, including trips, your own traveler profile, what you can see of the traveler profiles of the people you plan with, and travel documents. That app’s own privacy policy governs what it does with what it receives. You can revoke its access at any time on your Account page.
- To Service Providers: for hosting, data storage, email delivery, maps, weather, and analytics. They may use Personal Data only to provide services to us, except Google, which handles what it receives under its own privacy policy. For weather forecasts, we send Open-Meteo the locations and dates of stops on a trip, without your name or email address.
- In a business transfer: in connection with, or during negotiations of, a merger, a sale of our assets, a financing, or an acquisition of all or part of our business.
- When the law requires it: in response to valid requests by public authorities, such as a court or a government agency.
- To protect rights and safety: when we believe in good faith that disclosure is necessary to:
- comply with a legal obligation;
- protect and defend our rights or property;
- prevent or investigate possible wrongdoing in connection with the Service;
- protect the personal safety of Members or the public; or
- protect against legal liability.
- With your consent: for any other purpose you agree to.
Retention
We keep Personal Data only as long as we need it for the purposes this Privacy Policy describes, and as long as we must to comply with legal obligations, resolve disputes, and enforce our agreements.
- Your Account: while it is active. Within 30 days after you ask us to delete it, we delete your email address, passkeys, sign-in sessions, connected-app access, traveler profile, and preferences, along with the analytics, session recordings, and records of connected-app requests linked to your Account. Your name stays on the trip content you added, so the people you planned with can still see who added what. Content about you in records linked to another Member’s Account, such as your traveler profile in a response to an app they connected, is kept as their Usage Data.
- Trips: while the trip exists. When a trip is deleted, it leaves the Service at once, and 30 days later we permanently delete it with its places, reservations, and travel documents. We keep a record of each change to a trip (who made it, when, and which items it touched) after the trip is deleted, and copies of trip content in records of connected-app requests are kept as Usage Data.
- Support correspondence: as long as we need it to answer you and any follow-up.
- Session recordings: 30 days.
- Other Usage Data, including records of connected-app requests and responses: up to 7 years.
- Server logs: up to 14 days. They include the full address of each request, which can include an invitation link and the name and email address of someone joining.
- Backups: deleted data can remain in our database backups for up to 30 days.
We may keep Personal Data longer when the law requires it or when we need it to establish, exercise, or defend legal claims.
You may ask us how long we will keep your Personal Data.
International Transfers
We and our Service Providers process Personal Data wherever we and they operate, so your data may be transferred to and stored on computers outside your state, province, or country, where data-protection laws may differ from those where you live.
Where the law requires, we protect international transfers with appropriate safeguards and, where relevant, supplementary measures. We take all reasonably necessary steps to keep your data secure and to treat it as this Privacy Policy describes. We transfer Personal Data to an organization or a country only if adequate controls are in place, including for its security.
Reviewing, Correcting, and Deleting Your Data
You can change your sign-in email address on your Account page; we confirm the new address before the change takes effect. You can edit your traveler profile, and you can edit or delete trip content you have added. To change your name, to delete your Account, or to see, correct, or delete any other Personal Data we hold about you, email us at hello@puffin.travel.
We may keep some information when the law requires it or when another lawful basis allows it.
Security
We use commercially reasonable means to protect your Personal Data, but no method of transmission over the Internet or of electronic storage is 100% secure, and we cannot guarantee absolute security.
Children’s Privacy
The Service is not directed to anyone under 16, and we do not knowingly collect Personal Data from anyone under 16.
If you are a parent or guardian and believe your child has given us Personal Data, contact us. If we learn that we have collected Personal Data from anyone under 16, we will delete it as soon as reasonably possible.
Some countries and states set a higher age at which a person can consent to the processing of their own Personal Data. Where we rely on consent and the law that applies to a Member sets an age above 16, we may require a parent’s or guardian’s consent before we collect and use that Member’s Personal Data.
Links to Other Websites
The Service may link to websites we do not operate, such as a place’s own website. We do not control those sites and are not responsible for their content or privacy practices. Read the privacy policy of each site you visit.
Changes to This Privacy Policy
We may update this Privacy Policy. When we do, we will post the new version on this page and change the “Last updated” date at the top. If a change is material, we will also tell you by email or by a notice in the Service before it takes effect.
Contact Us
If you have questions about this Privacy Policy, email us at hello@puffin.travel.