Privacy
Last updated 8 November 2026
Ferdalag is a trip planner for groups. This page says what we store, why, and what you can do about it. Questions: [email protected]
What we store
Your name and email address. If you sign in with Google: your Google account's ID.
Everything you and your travel companions add to trips: plans, bookings, lists, expenses and uploaded documents.
The history of changes in each trip.
Sign-ins: IP address and browser, so you can be signed out and abuse can be stopped.
Assistants you connect to your account.
Why
Only to run the service, so you and your companions can plan together. We email sign-in codes, invites and trip reminders; reminders can be turned off in settings. No advertising, no tracking across sites, and no selling of data.
Who sees what
Your companions see what's in the trip. A trip's public page shows its name and dates and as much of the plan as its owner chooses, and your calendar link for a trip only the trip and its scheduled plans; neither includes bookings, costs, documents or travellers, and the public page shows notes only if the owner turns that on.
If you connect an assistant such as ChatGPT or Claude, it receives what you ask it to read, and the company behind it handles that under its own terms.
Where it's kept
Data and documents are on our own servers. Traffic passes through Cloudflare, which sees IP addresses. Google is involved only if you sign in with Google. Exchange rates come from the European Central Bank, with no personal data sent. We count visits with PostHog (servers in the EU), without cookies: it receives the page address (with private links removed) and the browser type; your IP address is only used to count unique visitors and is not stored. It never gets your name, email or trip contents, and it cannot recognise you from one day to the next.
How long
Anything you delete can be restored for 30 days, then it's gone. Database backups are kept for 30 days. A sign-in expires after 60 days without use.
Your rights
You can download all your data and delete your account in settings. Deleting removes your name, email and sign-ins; expenses you recorded in shared trips stay, without your name, so other people's balances still add up. Get in touch for anything else. You can also complain to your data protection authority (in Iceland, Persónuvernd).
Cookies
Only the necessary ones: sign-in, language and look. No third-party cookies, and visit counting uses none.