Privacy Policy

Last updated: 27 July 2026

Stopful (“we”, “us”) is a map-first road-trip planner at stopful.com. This policy explains what we collect, why, and the choices you have. Questions: contact@stopful.com.

What we collect

• Your trips. The stops, dates, guests, notes, budget, expenses and bookings you add. When cloud saving is available these are stored in our database (Supabase); otherwise they stay in your browser. Trips are identified by an unguessable link — no account is required to use Stopful.
• Account (optional). If you choose “Sign in with Google”, we receive your name and email address from Google to identify your account and sync your trips across devices. We never receive your Google password.
• Forwarded booking confirmations. If you forward a confirmation email to your trip’s private inbox address (trip-…@in.stopful.com), the email content is processed to extract the booking details (type, dates, place, price, confirmation number) using an AI service (Anthropic). The result is saved to your trip; we don’t use your emails for anything else.
• Technical data. Your IP address and basic request data are processed transiently to run the service, prevent abuse (Cloudflare Turnstile), and keep security/error logs.
• Usage analytics. We use a privacy-friendly, cookieless analytics tool (Vercel Web Analytics) that measures aggregate page views and performance. It sets no cookies, builds no profiles, and does not track you across other sites.
• Local storage. We store your current trip, preferences and (if signed in) your login session in your browser so the app works and remembers your trips. This is functional storage, not advertising.

How we use it

To provide and sync your trips, parse the booking confirmations you forward, prevent abuse, fix problems, and improve Stopful. We do not sell your personal data.

Service providers

We share data only with providers that help us run Stopful, each under their own terms:

• Supabase — database & authentication (trip and account storage).
• Anthropic — AI parsing of forwarded confirmations and attraction suggestions.
• Cloudflare — DNS, bot protection (Turnstile), and email routing for the forwarding inbox.
• Google — sign-in (only if you choose it).
• Vercel — hosting and cookieless analytics.
• OpenStreetMap / Nominatim — turning place names into map coordinates (used by search and by the MCP endpoint below).
• Travel partners (e.g. Booking.com, Airbnb, Aviasales and others) — when you click an outbound link you go to their site under their own privacy policies; they may set their own cookies once you’re there.

AI assistants (MCP)

Stopful offers an open MCP endpoint that lets an AI assistant (for example ChatGPT or Claude) plot a road trip you asked it to plan. The assistant sends only the trip it built — place names, plus coordinates and nights when it has them — which we use solely to build your editable map link, geocoding any missing coordinates via OpenStreetMap. The endpoint needs no account, and we don’t store the trip or any personal data server-side; we keep only coarse, transient request counts (by IP, per day) to prevent abuse. Anything you do afterwards on stopful.com is covered by the rest of this policy.

Affiliate links

Some outbound links are affiliate links. If you book through them we may earn a commission, at no extra cost to you. This never changes the prices you see.

Retention

You can delete any trip at any time. Cloud-stored trips that haven’t been opened for about 180 days are deleted automatically. Account data is kept until you ask us to delete it (contact@stopful.com).

Your rights

Depending on where you live (e.g. the EU/UK under the GDPR), you may have the right to access, correct, export, or delete your data, and to object to certain processing. You can export any trip from the app’s menu, and — if you’re signed in — permanently delete your account and all synced trips from Trips → Delete account. For anything else, email contact@stopful.com.

Cookies

We do not use advertising or cross-site tracking cookies on stopful.com. We use the functional browser storage described above and cookieless analytics. Travel-partner sites you click through to set their own cookies under their own policies.

Children

Stopful is not directed at children under 16, and we don’t knowingly collect their data.

Changes

We may update this policy; we’ll change the “last updated” date above. Questions: contact@stopful.com.