Privacy Policy
Last updated 6 November 2026
What we collect when you use Modern Travel, why, who else sees it, and what you can do about it. Written to be read, not just agreed to.
1. Who is responsible
Modern Travel is the data controller under the EU General Data Protection Regulation (GDPR) for the data described here. Privacy requests go to [email protected]. The company behind Modern Travel is listed at the end of this page.
2. What we collect and why
Trip requests
When you type a request into the planner (for example “a warm place for 5 days, €1500”), we send that text to our AI provider to generate an itinerary, then store the request and the itinerary so the trip has a shareable link and appears under My trips. Please don't include personal details about yourself or others in the request; the planner doesn't need them. Legal basis: performance of the service you asked for (Art. 6(1)(b) GDPR).
Visitor id
Without an account, trips are tied to a random id stored in a cookie (mt_vid) so that My trips works on this browser. The id tells us nothing about who you are. Anonymous trips are deleted after 12 months. Legal basis: our legitimate interest in making the planner usable without an account (Art. 6(1)(f)).
Account
If you create an account we store your name, email address, a hashed password (never the password itself), the date you joined, your sessions (device, browser, IP address, sign-in time) and the trips saved to your account. We email you only for the account itself: confirmation, password reset, email change, account deletion. No newsletters. Legal basis: the contract with you (Art. 6(1)(b)); security of your account (Art. 6(1)(f)).
Launch notifications
If you leave your email on our pre-launch page, we store it only to send you one message when the planner opens, then delete the list. You can ask us to remove it sooner at any time. Legal basis: your consent (Art. 6(1)(a)).
Server logs
Our web server records the IP address, time, requested page and browser of each request, to keep the site running and to stop abuse (for instance, limiting how many itineraries one address can generate per hour). Logs are kept for up to 30 days. Legal basis: legitimate interest in security (Art. 6(1)(f)).
Messages you send us, and account emails we send you, are handled by our own mail server on modern-travel.com.
3. Who else is involved
We don't sell data and we don't run advertising networks or analytics trackers. These companies process data on our behalf or receive it when you use a feature:
| Who | What they get | Why |
|---|---|---|
| Anthropic, PBC (USA) | The text of your trip request | Generates the itinerary (Claude). Covered by EU Standard Contractual Clauses; Anthropic doesn't train on API data. |
| Contabo GmbH (Germany) | Everything stored by the service | Hosts our servers and database, in the EU. |
| Expedia Group / Vrbo (USA) | Your IP address and their own cookies, only if you load the Vrbo search box | Shows live stays and tracks that the booking came from us (affiliate commission). See the cookie policy. |
| Viator (Tripadvisor, USA) | Nothing from your browser | We fetch tour listings on our server. If you click a tour you go to Viator's site under their policy. |
| Unsplash, Fontshare | Your IP address when your browser loads photos or fonts from their servers | Destination photos and the display font. |
When you click through to Vrbo, Viator or any other site, their privacy policy applies from that moment.
4. How long we keep things
- Account and its trips: until you delete the account (from the Account page). Deletion is immediate and includes every saved trip.
- Anonymous trips: 12 months from creation.
- Sign-in sessions: 30 days of inactivity, or until you sign them out.
- Server logs: up to 30 days. Database backups: 14 days.
5. Your rights
You can ask us to access, correct, export or delete your data, to restrict or object to how we use it, and you can withdraw consent at any time (for cookies, use cookie settings). Write to [email protected]; we answer within 30 days. Most of it you can also do yourself on the Account page. If you're unhappy with our answer you can complain to the Slovak supervisory authority, the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk), or to the authority in your own EU country.
6. Children
Modern Travel is for people aged 16 and over. We don't knowingly collect data from younger users; if that happened, tell us and we'll delete it.
7. Security
Connections are encrypted (HTTPS). Passwords are hashed. The database is only reachable from our own server, inside the EU, and is backed up nightly. No system is perfect; if a breach ever affects you, we'll tell you and the authority as the law requires.
8. Changes
If this policy changes in a way that matters, we'll show a notice on the site. The date at the top always tells you the current version.
9. Company details
Modern Travel is operated by Senza Limiti s.r.o.
Banskobystrická 6, 811 06 Bratislava, Slovakia
Company ID (IČO) 35955821 · VAT ID SK2022063681 · registered at the District Court Bratislava I, Section Sro, Insert No. 37629/B