Last updated 23 October 2026
Privacy
The short version: your trips and your journal stay on your device. We don't run ads, trackers or analytics.
What stays on your device
Trips, packing lists, budgets, your journal's notes and photos, and your settings are stored in your browser (IndexedDB and local storage). Journal photos are shrunk on your device and never uploaded. Clearing your browser data deletes all of it.
Places, maps, guides and photos
- Place lookups go through our server (ew-apps-api) to OpenStreetMap's Nominatim service, so its one-request-a-second limit can be shared fairly and answers cached. They carry place names and the destination's area, not who you are.
- Map tiles load straight from OpenFreeMap, which sees your IP address like any website would and sets no cookies.
- Guides come from Wikivoyage and climate averages from NASA POWER, both through our server. Destination photos load from Unsplash's servers.
- "Search stays" buttons open Booking.com or Airbnb in a new tab, under their own privacy policies. Natour sends them only the neighbourhood's name and has no affiliate deal with them.
When you use the AI
You choose the provider in Settings. The AI only ever sees your trip description, the destination, the number of days and month, and place names. Never your journal, photos or anything personal.
- Natour AI (free) runs through our server on Google's Gemini API free tier. Google may read and use prompts sent on the free tier to improve its products, so don't put personal or sensitive details in a trip description. You sign in with a code sent to your email (Supabase) so we can count your daily calls; we store your email, a user id, the date you confirmed you're 18 or over and a per-day call count. Nothing else. You can delete all of it any time from Settings. This option is not offered in the EEA, the UK or Switzerland, or to anyone under 18.
- Puter, OpenRouter and your own key send requests straight from your browser to that service, under its own privacy policy. Keys are stored only in your browser.
Our server
Our API logs the time, route and status of requests to keep it running, and uses your IP address in memory to apply rate limits and the region rule. Place, guide and climate answers are cached in memory for up to a month. We don't sell or share data.
Contact
Questions or deletion requests: reach Emmanuel via emmanuelwilson.tech.