Privacy

Would Travel stores what you type into a wish so we can show ideas and, only if you ask, email you when a later match fits.

What we store

• Wish inputs: party size, children’s ages (never names), pets, dates or months, budget, airports, ZIP if you give one, destinations, vibes, and a short note.
• Your email, the exact consent sentence you agreed to, and a hash of the IP address used at consent. We do not store the raw IP.
• Which ideas you marked, pledge first names or initials on a public wish, and which outbound slot you clicked. Clicks are not tied to your name.

Why

To generate the idea list, to send the confirmation and the match notes you opted into, and to see which partner links people use. We do not sell personal information.

Processors

The site runs on Vercel. The database is Neon Postgres. Email, when a mail key is configured, is sent by Resend. Idea text, when an AI key is configured, is generated by Google Gemini. If those keys are absent, the wish is still saved and ideas come from a curated fallback. No payment processor is involved, because we do not take payment.

Retention

A daily job deletes wishes whose dates expired more than 12 months ago, and subscribers who unsubscribed more than 12 months ago, along with their wishes. You can delete a wish from the manage link in any email. To delete the email address itself, write ops@threepaths.co from that inbox.

Public wishes

A shared wish card shows the party as “2 adults + 2 kids,” the place, the timing, and the budget. It does not show your email, note, ZIP, or home airport unless you typed a destination that reveals it. Indexing is off unless you opted in.