Privacy Policy

You do not need an account. You choose the material to process: booking emails, screenshots, PDFs, spreadsheets, I-94 records, CBP FOIA records or photos of your passport stamps. These materials may contain names, document numbers and other personal details as well as travel dates and countries. Only send what is needed to organize your trips.

Uploaded files go to our Supabase storage in the United States. We use Google's paid Gemini API to read dates and countries from them. We delete the uploaded files from our storage immediately after they have been read. The extracted results are returned to your browser; our server does not save them.

Pasted text is also sent for processing with the paid Gemini API. Our server handles it only for that request and returns the results to your browser without saving the text or results. The deletion statements here describe our storage and request handling; Google's separate processing is explained below.

Under Google's paid API terms, the inputs and results we send through the paid service are not used to improve Google's products or train its general-purpose AI models.

Google's abuse monitoring policy separately states that prompts, context and outputs are retained for 55 days for security, policy enforcement and required legal disclosures. Authorized Google staff may review flagged content. That policy permits use for models specifically involved in policy enforcement. Deleting an upload from our storage does not delete these Google records.

Google Maps Timeline export files are parsed in your browser. We do not upload those files or send them to Gemini.

Your organized trip list and your edits are saved in your browser's localStorage. We cannot see that local copy. If you clear the site's browser data, the list and edits are lost; we do not have a saved copy to restore. Your browser also stores your unlock code and email address for using the tool.

When you request a PDF, you send the list you want to export to our server. That list can include dates obtained from Timeline and changes you made locally. This submission is separate from keeping your working list in your browser.

Our server uses the list you submit to generate your PDF. We keep the finished PDF for 24 hours so you can download it through a QR code or an email link. It is automatically deleted after that period. This temporary PDF is separate from the working list saved in your browser.

If you provide an email address for delivery, we use Resend to send an email with the PDF attached. Resend processes the recipient address, message and attachment to deliver it. Deleting the hosted PDF does not remove an attachment already delivered to your mailbox or a file you have downloaded. Keep the PDF link private and save your copy within 24 hours.

We collect an email address at payment to deliver your unlock code and PDF. Payments are handled by Waffo, acting as Merchant of Record, or PayPal. We do not receive or see your full card number.

We store your unlock code and remaining export count on our server so you can use the exports you bought. We also keep order records containing your email address, payment amount and payment time for accounting. A browser copy of an unlock code is separate from this server record.

If you email support@travelhistorytool.com, we receive your address and the information you include so we can answer your question or handle a refund or privacy request. Please describe the issue without attaching passport pages or a full travel history. Support covers using the tool; it does not include reviewing your records or giving legal advice.

Cloudflare Turnstile checks whether a request comes from a person. Upstash supports limits on requests by IP address. These checks process technical information, including IP addresses and verification or request data, to prevent automated abuse. Each upload request allows up to 20 files, with a maximum of 10 MB per file.

We use Cloudflare Web Analytics to understand overall visits and site performance. It does not use cookies or track individual visitors. We do not use Google Analytics or run advertisements. See our Cookies and Local Storage Policy for browser storage details.

Where the GDPR or UK GDPR applies, we rely on performing our contract with you, or taking steps at your request before a purchase, to read the records you submit, return results, generate and deliver PDFs, process payments and refunds, and maintain your export balance. These purposes require the material or payment details relevant to your request. Without them, we cannot carry out that request.

We rely on legitimate interests to prevent fraud and automated abuse, keep the service working, understand overall site performance and handle support or misuse reports. Those interests are operating a reliable service and protecting users and the business. We do not use travel records for advertising or to decide your immigration eligibility.

We keep necessary order records to meet statutory accounting obligations. Where an obligation qualifies under the GDPR or UK GDPR, our basis is compliance with that legal obligation. For necessary accounting records outside that basis, we rely on our legitimate interest in keeping proper business records.

Recognition and calculations are automated, but they organize information for you to check. They do not make legal or immigration decisions about you.

Google Gemini: reads the uploaded material and pasted text sent for recognition and returns extracted results through its paid API.

Supabase: stores uploaded source files temporarily in the United States while they are processed for recognition.

Resend: sends PDF delivery emails, handling the recipient address, message and PDF attachment.

Waffo: acts as Merchant of Record when you pay through Waffo and handles payment and refund information. PayPal: handles payment and refund information when you use PayPal. These providers also have their own legal obligations and privacy notices for payment processing.

Cloudflare: provides Turnstile verification and cookie-free Web Analytics. Upstash: handles IP-based request counters for rate limiting. Vercel: hosts the website and server processing used to respond to your requests.

The providers receive data needed for their roles, rather than all receiving every upload. Their own security, delivery, payment and legal records can have retention periods separate from our uploaded-file and PDF deletion periods.

Uploaded source files are deleted from our storage immediately after recognition. Our server does not retain the recognition results or pasted text after the request. Generated PDFs are automatically deleted after 24 hours. Google retains separate abuse-monitoring records as described above.

Your local trip list, edits, unlock code and email remain in your browser until you or your browser clear that site data. We cannot erase that local copy remotely. Clearing it does not erase order records or change the export balance kept on our server.

We keep unlock-code and balance records as needed to provide the exports you purchased and resolve related payment issues. Order records are kept for the period required by applicable accounting law. Support correspondence is kept as needed to answer the request and resolve related issues. Security data is kept as needed to enforce request limits and address abuse. You can ask about the retention or deletion of a particular record at support@travelhistorytool.com.

The operator is based in China, and uploaded files are stored temporarily in the United States. The providers listed above may process data in other countries where they operate. Your data is therefore not necessarily processed only in the country where you live.

For information about the international transfer arrangements and safeguards applicable to your data, or to request a copy of the relevant safeguards, contact support@travelhistorytool.com.

Where the GDPR or UK GDPR applies, you can request access to the personal data we hold, correction of inaccurate data, deletion, restriction of processing and a portable copy where the right to portability applies. These rights depend on the processing and its legal basis. Required accounting records may need to be retained even after a deletion request.

You have the right to object to processing based on legitimate interests. To object, or exercise another right, email support@travelhistorytool.com and describe your request. We reply within 24 hours; completing a data request can take longer, within the period required by law. We may need enough information to confirm that the request concerns your data.

You can also complain to the data protection authority where you live or work in the EU, or to the UK Information Commissioner's Office. You do not have to contact us before making a complaint.

We can help with data we hold on our server. To remove the list, edits, unlock code or email saved only in your browser, clear this site's local storage in your browser settings. See Cookies and Local Storage.