Privacy

We keep as little as the site needs to work, and we do not sell or share it.

What we store

• Account: your email address, name, and, if you sign in with Google, the profile image Google provides. Sign-in links are single use and expire in 15 minutes.
• Profile: whatever you add: handle, bio, country, languages, website. All of it is public except your email.
• Content: posts, comments, events, RSVPs, photos and stays you create. Stays are visible only to signed-in members and disappear from city pages after the end date.
• Photos: resized and re-encoded on upload; camera metadata including GPS location is removed and never stored.
• Guide feedback: your answer and any note, with a hashed IP to limit repeats.
• Reports: what you reported and why, visible to staff only.

What we use

• Cloudflare hosts the site, database and images. Requests pass through Cloudflare's network and may be logged there for security.
• Cloudflare Web Analytics counts page views without cookies or fingerprinting.
• Cloudflare Turnstile protects sign-up from bots.
• Cloudflare Email Service delivers sign-in emails. Google handles Google sign-in.
• Chinese glyphs for share images are fetched from Google Fonts on our server, not in your browser.

Cookies

One session cookie when you sign in, and a local preference for light or dark mode. Nothing else.

Your choices

You can edit or delete your posts, events and stays at any time. Deleting your account from the settings page removes your profile and content. For anything else, email us.