Last updated: 3 November 2026
We collect as little as the project can function on. We do not use third-party analytics, and we do not sell or rent personal information to anyone.
You can use the whole map without an account — browsing, searching and planning routes. Everything in the account section below exists only if you choose to sign up.
| What | Why | Kept | Who can see it |
|---|---|---|---|
| Anonymous visitor id — a random identifier in your browser's local storage | To count how many people reach the free route limit, without identifying anyone | Until you clear your browser storage | Never shown to anyone |
| Usage events — that a route was requested, the limit was reached, a button was clicked, with a timestamp | To measure whether the project is worth continuing | Indefinitely, anonymous | Aggregate counts only |
| Approximate location, if you allow it | To sort suggestions by distance from you and default your starting point | Not stored. Held in the page while open, and sent to our own server only when you ask for a route | Never shown to anyone |
| Your feedback — features you would like and what you would use HowToGet for | To decide what to build next | Until you ask us to delete it | Private |
| What | Why | Kept | Who can see it |
|---|---|---|---|
| Email address | It is how you sign in — we email you a link, or Google tells us the address if you choose "Continue with Google". Either way there is no password | Until you delete your account | Never shown publicly |
| Display name, and an avatar image if you add one | So your reviews are attributable to a person rather than an id | Until you change or delete it | Public beside any review you write |
| Home or starting location, if you set one | So routes can start from where you actually are | Until you change or delete it | Private |
| Saved places and places you mark as visited, with any notes and dates you add | To show them back to you, and to suggest places you might like | Until you remove them or delete your account | Private — including your notes |
| Your star ratings | Your own rating is shown to you; ratings are averaged across everyone | Until you remove them or delete your account | The average is public; which rating was yours is not |
| Reviews you write | To help other people decide where to go | Until you delete them or delete your account | Public, with your display name and the date |
| Your stated interests and travel preferences | To suggest places. Entirely optional and skippable | Until you change or delete them | Private |
| Whether you agreed to receive email, and an unsubscribe token | So the unsubscribe link in an email works without making you sign in | Until you delete your account | Private |
| Sign-in links and session records | To keep you signed in and to expire old sessions | Sign-in links expire in minutes; sessions after 90 days | Private |
| What | Why | Kept | Who can see it |
|---|---|---|---|
| For people who gave to the project before it stopped accepting money: the order reference, amount, date and email | Financial records | As long as the law requires; deleted on request otherwise | Private |
Passwords. There are none. Sign-in is a link emailed to you, so we never hold a password for you to have reused somewhere else.
| Who | What they get | Why |
|---|---|---|
| Resend | Your email address and the message | To deliver sign-in links |
| Only if you choose "Continue with Google": Google tells us your email address, name and profile picture, and knows that you signed in here | So you can sign in without waiting for an email. Using the emailed link instead involves Google not at all | |
| Transport for NSW | Nothing about you | We consume their published timetables; they receive no request of yours |
| Advertisers | Nothing | Promoted listings are sold against a place, never against a person. No profiles, no segments, no lists |
We may show paid promoted listings in future. They will be labelled as sponsored, they will never influence routing or which route we recommend, and they do not involve sharing your personal information. We do not use advertising or tracking cookies, and there are no third-party advertising scripts on this site.
Only two things you provide are ever public: your display name and the reviews you write (with their date and star rating). Your email address, your saved places, the places you have visited, your private notes, your preferences and which rating was yours are never shown to anyone else. We never publish internal user ids.
Your display name is your choice — it does not have to be your real name, and it defaults to the part of your email address before the @ rather than the whole address.
Creating an account does not subscribe you to anything. We will email you a sign-in link when you ask for one. Anything else — such as a weekly "your weekend without a car" suggestion — requires you to opt in explicitly, and every one of those emails carries a working unsubscribe link.
Under the Australian Privacy Principles you can ask us to show you what we hold about you, correct it, or delete it. Write to andrii.rohovyi@postdata.ai.
On a single server in Helsinki, Finland, in one file. Backups are held in the same place. Resend and Google (if you use Google sign-in) process data on their own infrastructure under their own terms.
One cookie, and only if you sign in: a session identifier, HttpOnly and Secure, lasting 90 days. No advertising cookies, no tracking cookies, no third-party cookies.
This is a travel planner, not a service aimed at children, and we do not knowingly create accounts for people under 15. If you believe we have, write to us and we will delete it.
If we change what we collect or how we use it, this page changes first, and materially different uses of information you have already given us will be asked about rather than assumed.