Privacy Policy

1. Information We Collect

When you create an account we collect your email address, chosen username, and a bcrypt hash of your password. We never store your password in plain text.

When you create or edit itineraries we store the content you provide, including place names, descriptions, stop details, and any ratings you submit.

2. How We Use Your Information

We use your email address only to identify your account and, if you request it, to reset your password. We do not send marketing emails.

Your username and public itineraries are visible to other Ntripi users according to the visibility settings you choose (public, followers-only, or private).

3. Data Sharing

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

We use OpenStreetMap / Nominatim for geocoding. Searches you make when adding stops are sent to Nominatim. We do not store the raw search queries. OpenStreetMap data is used under the Open Database Licence (ODbL).

4. Data Retention and Deletion

You may delete your account at any time from the app settings. Account deletion permanently removes your profile, itineraries, and identifying information.

Ratings you have submitted are retained in anonymised form (score only, no user link) to preserve the integrity of community scores. You consent to this when you create your account, as described in our Terms of Service.

5. Cookies

When you sign in through the Ntripi website we set a single HTTP-only session cookie (ntripi_session) containing a signed JWT. This cookie is used only to keep you signed in and is never shared with third parties.

We do not use analytics cookies, advertising cookies, or any third-party tracking scripts.

6. Security

All data in transit is encrypted with TLS. Passwords are hashed with bcrypt before storage. Session tokens are signed JWTs — they cannot be forged without our server secret key.

7. Changes to This Policy

We will update this page when our practices change. The "Last updated" date at the top of this page reflects the most recent revision.

8. Contact

Questions about your data? Email us at [email protected].