Version 1.1 · Updated 2026-08-12
This notice supplements the Privacy Policy with specifics on cookies and the third-party services (sub-processors) that handle data on this service's behalf.
| Cookie | Purpose | Type |
|---|---|---|
| Supabase auth session cookie | Keeps you signed in | Strictly necessary |
No analytics cookies, no advertising cookies, no third-party tracking pixels are used on this service. This will be reviewed if analytics are ever added, and this notice will be updated first.
| Provider | What it does for us | What it sees |
|---|---|---|
| Supabase | Database, authentication, file storage | All application data (trips, documents, photos, etc.), scoped per account by row-level security |
| Vercel | Application hosting | Standard request logs (IP, timestamp, browser) |
| Resend | Sends account and invite emails | Recipient email address and the content of transactional emails (magic links, invites) |
| Anthropic (Claude Haiku API) | Reads uploaded tickets/receipts/documents to suggest itinerary, expense, and document details | The content of the specific file you submit for scanning, for that request only; not used to train models, not retained by us beyond the review step |
| Paddle | Takes payment as merchant of record and is the seller for the transaction, including the receipt and any sales tax or VAT | Your name, email and billing address, and the card details you enter at its checkout, which it collects directly and we never see; plus your purchase and subscription history |
| OpenFreeMap | Serves the map tiles, terrain shading, and map fonts on the bucket list map | Your IP address and which part of the world map you are looking at, for each tile your browser requests; no account data is sent |
We do not use any provider for advertising, and we do not sell data to any of them or anyone else.
Contact travel@notetoself.online with any question about how a specific provider handles your data.