Privacy Policy

Tripfolio (www.trip-folio.com) is a free travel map app run by Meir Yoshvayev, from Israel. In this policy, "we" and "us" mean Tripfolio, and we are the controller of the personal data described here.

Questions about your data? Write to meir@trip-folio.com.

We collect only what the app needs to work:

• Your account: email address, first and last name, username, gender, and (if you add them) a bio, location, website and profile picture. We use these to run your account and show your profile.
• Your password: stored only as a one-way hash, never in plain text. If you sign in with Google you may have no password at all.
• Google sign-in: if you choose it, we receive your email, name and your Google account ID, and store the ID so we can recognise you next time. We don't post anything on your behalf. (Sign-in with Facebook was offered until 21 October 2026; accounts made with it keep the Facebook ID we stored then.)
• Your travel data: the countries and US states you mark as visited or want to visit, and your trips (country, title, dates, cities and story).
• Your photos: trip photos and photos you send in chats. Before we store a photo we re-encode it and remove its location data (EXIF/GPS). Photos are kept in private storage and shown only through short-lived links, to people who are allowed to see them.
• Social activity: who you follow and who follows you (including pending follow requests), blocks, a feed of your activity (countries marked, trips added) and your notifications.
• Messages: direct messages and message requests between users. We don't read them; they are visible only to the people in the chat. If someone reports a message, we keep a copy of it so we can review the report.
• Sessions: when you sign in we store a hashed session token, your device and browser description (user agent), your IP address and when it was last used, so you can see and end your active sessions in Settings.
• Sign-up source: if you accept all cookies, we remember the link or website that brought you to Tripfolio (for example campaign tags such as utm_source, or the referring site) and save it on your account when you sign up. We use it to learn which channels bring people in. If you chose "Essential only", we don't record it. If you joined from a friend's invite link, we remember who invited you.
• Technical data for security: short-lived counters keyed by IP address or email address that limit repeated sign-in and sign-up attempts. They are deleted automatically when their time window ends.
• Emails we send you: confirming your email address, resetting your password, security notices (such as a changed email or password), and, only if you turn them on in Settings, notification emails.

We count page visits with Vercel Web Analytics, which uses no cookies and stores nothing in your browser: it records the page (without its query, except campaign tags), the referring site, and your country and device type, and it doesn't identify you.

Google Analytics, only if you accept all cookies: it helps us see which pages people visit, how they move around the site and where they come from. Google sets the _ga cookies and receives the page you're on (without its query, except campaign tags), the referring site, your browser and device, and your IP address, which Google Analytics doesn't store. We don't send your name, email or account details, we don't use it for ads, and Google keeps the data for up to 14 months. If you choose "Essential only", Google Analytics doesn't load, and its cookies are deleted if you change your mind later. We do not use advertising tools.

This is everything Tripfolio stores in your browser:

• tv_session (essential, up to 30 days): Keeps you signed in.
• tripfolio-theme (essential, until you clear it): Remembers light or dark mode (stored in this browser).
• tripfolio-install-hint (essential, until you clear it): Remembers that you closed the "Add to home screen" tip (stored in this browser).
• tf_consent_v2 (essential, 12 months): Remembers your cookie choice.
• tf_src (optional, only with your OK, 30 days): Remembers which link brought you here when you sign up. No ads, no third parties.
• _ga, _ga_* (optional, only with your OK, 13 months): Google Analytics: counts visits and how the site is used, without identifying you. No ads.

You can change your choice at any time with "Cookie settings" in the footer of the home page or in Settings.

You are in control of your profile:

• Public profile: anyone with the link, including people who aren't signed in, can see your map, stats, trips and photos, except the parts you hide.
• Private profile: only people you approve as followers see your map and trips. Everyone else sees just your name, username and picture.
• Separate switches in Settings let you hide your visited countries, wishlist, trips or photos on their own.
• Never shown to others: your email address, password, IP address, sessions and messages.

Your name, username, picture and activity can show up in other people's search results, follower lists and feeds, as your settings allow.

We use a few companies to run Tripfolio. They process data only on our behalf:

• Vercel: hosting of the website and app.
• Neon: the database that holds your account and travel data.
• Cloudflare R2: private storage for photos.
• Resend: sending our emails.
• Google Analytics (Google): visit statistics, only if you accept all cookies.
• Google: only if you sign in with it.

These providers may process data outside Israel and the EU, including in the United States. We don't sell your data, we don't share it with advertisers, and we don't show ads. We may disclose data if the law requires it.

• Your account and content stay until you delete them or delete your account.
• Sessions expire after 30 days without use, and you can end them earlier in Settings.
• Password-reset and email-confirmation links expire and can be used once.
• Attempt counters for security are deleted when their time window ends.
• Backups kept by our database provider may hold deleted data for a short time before they are overwritten.

You can delete your account yourself at any time: sign in, open Settings, choose Delete Account, then confirm with your password (if you have one) and your username.

Deleting your account permanently removes:

• your profile, email, name and sign-in details (including a linked Google ID, or a Facebook ID from before 21 October 2026);
• your visited countries, wishlist, US states and trips;
• your photos and profile picture, from our storage as well as the database;
• your follows, followers, blocks, notifications, feed activity and sessions;
• your conversations and chat photos (for both sides of each chat).

This can't be undone.

If you can't sign in (for example, you signed up with Facebook before we removed it) and want your data removed, emailmeir@trip-folio.com from the address on your account, and we will delete it for you.

Under Israeli privacy law, and under the GDPR if you are in the European Union or the UK, you can ask us to give you access to your data, correct it, delete it, restrict or object to how we use it, and send you a copy (export). You can edit most of your data yourself in the app. For anything else, or for an export, email meir@trip-folio.com and we'll reply within 30 days.

If you are in the EU or UK and think we handled your data wrongly, you can also complain to your local data protection authority. In Israel, that is the Privacy Protection Authority.

Tripfolio is for people aged 16 and over. If you think a child under 16 has an account, tell us and we will delete it.

We protect your data with encrypted connections (HTTPS), hashed passwords, private photo storage with short-lived links, session controls, and limits on repeated sign-in attempts. No online service is perfectly secure, so please use a strong, unique password. If you find a security problem, please tell us at meir@trip-folio.com.

We may update this policy as Tripfolio grows. When we make an important change, we'll tell you in the app or by email. The date at the top shows when it was last updated.

Tripfolio, run by Meir Yoshvayev, Israel. Email: meir@trip-folio.com. See also our Terms of Service.