Privacy Policy
Last updated: 9 April 2026
What Travel Pal does
Travel Pal is a free offline-capable travel companion. It shows phrasebook audio and a currency calculator for 10 destination countries. No account or sign-up is required.
Cookies we set
All cookies are preference-only. No tracking or advertising cookies are set.
| Cookie | Purpose | Expires |
|---|---|---|
| selectedCountry | Remembers your last destination | 1 year |
| theme | Light or dark mode preference | 10 years |
| genderPreference | Masculine / feminine / neutral phrase variants | 1 year |
| currencyAmount | Last currency calculator amount | 1 year |
| selectedLanguage | UI language preference (EN or PL) | 10 years |
| sourceCurrency | Your home currency selection | 10 years |
| targetCurrency | Your destination currency selection | 10 years |
All cookies use SameSite=Lax and Secure on HTTPS. No cookie data is sent to any server — cookies are read and written entirely in your browser.
Analytics
Travel Pal uses PostHog (EU-hosted at eu.i.posthog.com) for anonymous usage analytics. PostHog is configured in cookieless mode ("memory" persistence) with session recording disabled. No personal identifiers are collected. No analytics cookies are set. Data is retained on PostHog EU servers per their privacy policy.
Analytics data is retained for 24 months, after which it is automatically deleted.
Legal basis: Legitimate Interest (GDPR Art. 6(1)(f)). Analytics data is fully anonymous, cookieless, and contains no personal identifiers. The legitimate interest is improving the app based on aggregate usage patterns.
Vercel Analytics
Travel Pal uses Vercel Analytics (by Vercel Inc.) for web performance monitoring. On every page load, the following data is sent to vitals.vercel-insights.com:
- Page URL and HTTP referrer
- Browser type and version
- Device type
- Country (derived from IP address, IP itself is not stored)
No cookies are set. No personal identifiers are collected. Data is processed on Vercel infrastructure (US-based, with EU routing where available). Transfers rely on Vercel's Data Processing Agreement and the EU-US Data Privacy Framework. See Vercel Analytics privacy policy.
Vercel retains analytics data for up to 36 months per their data processing agreement.
Legal basis: Legitimate Interest (GDPR Art. 6(1)(f)). The data is anonymous, cookieless, and used solely to understand how the app performs. Vercel Analytics cannot be individually opted out of. If you prefer not to be included, do not visit the site.
IP geolocation
On your first visit (when no destination cookie exists), the app calls ipapi.co to detect your country and pre-select the nearest travel destination. This sends your IP address to ipapi.co (a third-party service). The request has a 5-second timeout. No result is stored server-side. On subsequent visits your saved destination cookie is used instead.
If you prefer not to use geolocation, simply select a destination manually. This sets the cookie and skips geolocation on all future visits.
Legal basis: Legitimate Interest (GDPR Art. 6(1)(f)). The IP lookup runs once on first visit only, returns country-level data (no precise location), and the result is not stored server-side. The legitimate interest is providing a better default experience by pre-selecting the nearest destination.
Data we do not collect
- No account, email, or name
- No location beyond country-level (geolocation API not used)
- No microphone or camera access
- No payment data
- No data sold or shared with advertisers
Data controller
Travel Pal is operated by Jed Tabaczynski, an individual based in Poland. For data subject requests (access, correction, deletion, portability, or objection), use the contact form at byjed.com. Requests are processed within 30 days per GDPR Art. 12(3).
Third-party recipients
The following third parties may receive or process data in connection with Travel Pal (GDPR Art. 13(1)(e)):
- Analytics provider: PostHog Inc. (EU servers), processes anonymized usage data.
- Hosting provider: Vercel Inc. (US, with EU routing), serves the application and collects basic analytics.
- Geolocation provider: ipapi.co, processes your IP address to detect your location (one-time, on first visit).
No data is sold to third parties. No data is shared for advertising purposes.
Your rights (GDPR)
Under GDPR you have the following rights regarding your personal data:
- Right of access (Art. 15): request a copy of your data.
- Right to rectification (Art. 16): correct inaccurate data.
- Right to erasure (Art. 17): request deletion of your data.
- Right to restriction of processing (Art. 18): request that we limit how your data is processed.
- Right to data portability (Art. 20): receive your data in a machine-readable format. Since Travel Pal stores no personal data server-side, this applies only to cookies stored in your browser.
- Right to object (Art. 21): object to processing based on legitimate interest. If you object, we will stop processing your data unless compelling legitimate grounds override your interests.
- Right to lodge a complaint (Art. 77): file a complaint with a supervisory authority. For Poland, the supervisory authority is UODO (Urząd Ochrony Danych Osobowych, uodo.gov.pl). You may also contact your local EU/EEA data protection authority.
Since Travel Pal stores no personal data server-side, you can exercise most rights locally by clearing cookies in your browser settings.
Contact
For questions about this privacy policy or to exercise your GDPR rights, use the contact form at byjed.com.