Privacy

Last updated 25 October 2026

Michiplan is a trip planner. This page explains what it keeps about you, why, and what you can ask for.

Michiplan is a free beta. Nothing is sold, so nothing about payments is collected.

Michiplan is run by an independent developer, who decides how your data is used (the “data controller”). Questions and requests go to hello@michiplan.com.

What we keep

• Your Google account. When you sign in with Google we receive your Google account ID, email address and name. We never see your Google password, contacts or anything else in your account.
• Your trips. The places, dates, hotels, flights, settings and plans you enter are saved to your account so they are there on any device you sign in from. The people who run Michiplan, and only they, may open and study your trips, one at a time or together, to fix problems, to check and improve the plans it makes, to improve its place and travel data, to design new features and to stop abuse.
• Links you share. When you share an itinerary, a copy of it (its text, the route and the places on the map) is stored so that anyone with the link can read it. A link stops working after 30 days, or sooner if you remove it, delete the trip it was made from, or delete your account.
• Feedback you send. A rating of Michiplan, the part you say needs the most work and what you write, or a search you told us found nothing, with your account, the page, the trip it was sent from (its ID and how many days and places it has, not its contents), so we can read it and answer you. A copy is emailed to us. What we keep is deleted with your account; the emailed copy may stay in our mailbox.
• How many plans you calculate each day, so that the limits of your plan can be applied.
• Which parts of Michiplan you use: a short record with your account ID and the time each time you do something in Michiplan, for example: sign in, open a step of the planner, search, filter, open, add or remove places, paste a Google Maps link, turn on a map layer, look at lines and departures or type a timetable, set dates, flights or how you arrive, open a settings tile, calculate, act on places left out, edit, reorder or view your days, open a stop in Google Maps, export or share your plan; when someone opens a link you shared; and when an error screen is shown. When you create an account, it also notes the kind of site you came from (such as a search engine, Reddit or a shared plan, never its address), the language you used Michiplan in and the language your browser asks for. Each holds only the kind of action (such as “opened Explore”), never page addresses, trip contents or an IP address. Visits to the home page by people not signed in, and deleted accounts, are counted only as a number a day. It is seen only by us and tells us what to improve.
• One sign-in cookie, which holds a random code that keeps you signed in. It lasts 30 days and renews while you use Michiplan. We store only a scrambled form of it. While you sign in, up to four more cookies hold the sign-in’s safety codes, the page to come back to and the kind of site you came from; they are removed when sign-in ends, or after 10 minutes. All of these are needed for Michiplan to work, so they are not asked for. While a plan is being calculated, the browser tab also keeps the answers so far, so that reloading the page does not lose them. They stay in that tab and are forgotten when it is closed.
• Technical logs. Our hosting provider records requests (IP address, browser type, time, page) to keep the service secure and fix errors. Sign-ins (including failed ones), signing out everywhere, account deletions, planning errors and errors your browser reports are also logged with your account ID, never with your email address or your trips.
• Recordings of how pages are used, only if you allow them. If you say yes in the bar shown on your first visit, Microsoft Clarity records clicks, scrolling, mouse movement and which pages you open, with every piece of text on the page hidden before it leaves your browser, so it never sees your trips, places, names or email address. It sets its own cookies to tell your visits apart, for up to a year. If you say no, none of it is loaded. Your answer is kept in your browser, and you can change it any time under “Cookie settings” at the foot of the page. The same yes also loads Google Analytics, which counts visits and how people found Michiplan. It sets its own cookies (their names start with _ga) for up to two years, receives the page’s path but never its title, query or text, and has every advertising feature turned off.
• Google Maps links you paste. When you paste a Google Maps share link, our server opens it at Google to read the place it points to. Nothing about you is sent with it, and the link is not stored apart from the place you add.

Please do not put sensitive details in your trips, such as passport numbers, health information or anything about other people they would not want stored. Michiplan does not need them.

We do not sell or rent your data, show ads, or use advertising cookies. We count visits with Cloudflare Web Analytics, which sets no cookies, and only if you allow it, Microsoft Clarity records how pages are used, with all text hidden (below). We do not use your trips or your Google data to train AI models. Fonts are served by Michiplan itself. With the same yes, Google Analytics counts visits too, with its advertising features turned off.

Why we use it, and on what basis

• To provide the service you asked for: signing you in, saving and planning your trips, applying your plan’s limits, showing shared links and answering your emails. The law calls this performing our contract with you.
• To improve Michiplan (the record of which parts you use). This is our legitimate interest in knowing what people use, kept small so it does not override your rights: it stays with us and is deleted after 400 days or with your account.
• To check and improve the planning (reading your trips, as described above). This is our legitimate interest in a planner that plans well. Only the people who run Michiplan see trips; they are never sold, shared or used for advertising. You can object to this use at any time by writing to us, or delete a trip or your account.
• With your consent, for the Clarity recordings: you can withdraw it any time under “Cookie settings”, and nothing more is recorded from then on. The same consent covers Google Analytics.
• To keep Michiplan secure and working, to stop abuse and fix errors (the logs and request counts). This is our legitimate interest in running a safe service, and it does not override your rights: the logs are short-lived and not used for anything else.
• To meet legal obligations.

Apart from the Clarity recordings, we do not rely on your consent for any of this, and Michiplan makes no automated decisions that have legal or similarly significant effects on you. You need a Google account to save trips; without one you can only read the example and shared links.

Google account data

Signing in asks Google only for your basic profile: the account ID, email address and name (the openid, email and profile permissions). We use them only to sign you in, to show who is signed in, and to tell you about your account. We do not share them with anyone except the providers below, who run Michiplan for us, and we do not use them for advertising. Michiplan’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who else handles it

These companies process data for us to run Michiplan, and only for that:

• Google: Google sign-in, Google Cloud, which hosts the app in Singapore, and Gmail, which delivers the copy of your feedback to us.
• Supabase: the database where accounts and trips are stored, in Singapore.
• Cloudflare: our domain name, and email sent to hello@michiplan.com, which it passes on to our inbox without keeping it.

Your browser also loads some things directly from other services, which see your IP address and what was requested, under their own privacy policies:

• Map images from our map provider, currently OpenFreeMap, which sets no cookies.
• Place photos from Wikimedia Commons.
• Visit counts by Cloudflare Web Analytics: which page was opened, the page you came from, your browser and device type, the country your IP address is in, and how fast the page loaded. It sets no cookies and keeps nothing in your browser, does not follow you across sites, and tells us only totals, never who you are.
• How pages are used, only if you allow it, by Microsoft Clarity (Microsoft), under Microsoft’s own privacy statement: clicks, scrolling and page views with all text hidden, your browser and device type, and the country your IP address is in. Microsoft keeps recordings for 30 days and the totals made from them for up to 13 months.
• Visit measurement, only if you allow it, by Google Analytics (Google), under Google’s own privacy policy: the pages opened (their path only), the site you came from, your browser and device type, and the region your IP address is in. Google signals and ad personalisation are off. Google keeps it for up to 14 months.

Your data is stored in Singapore. Our providers may process it in other countries, including the United States; where the law asks for it, they protect such transfers with the standard contractual clauses their own terms include.

If Michiplan is ever sold or passed on, your account would go with it to the new owner, who would have to keep to this policy; we would tell you first, so you could delete your account if you prefer.

We give your data to anyone else only if the law makes us (for example a court order), to protect someone’s safety, or to stop fraud or abuse of Michiplan. We send you only emails about your account, never marketing unless you ask for it.

How we protect it

Connections are encrypted, the sign-in code is stored only in scrambled form, card details never reach us, and only the people who run Michiplan can reach the database. They can open any trip, for example to answer a request from you or to fix a fault, and each time they open someone else’s trip it is recorded in the security log (who, whose and which trip, never what is in it). No service on the internet can be completely secure, so we cannot promise that yours will never be reached, but if a breach puts your data at risk, we will tell you and the authorities as the law requires.

How long we keep it

Your account, trips and daily counts are kept until you delete your account, and the record of which parts you use for at most 400 days; deleting it removes them at once, with its shared links and sessions; copies in the database’s own backups disappear as those backups are replaced, within about a week. One thing is kept apart from the account on purpose: the number of calculations made each day, filed under a scrambled code made from your Google account ID (never your email or the ID itself), so that deleting the account and signing up again does not reset the daily limit. Those counts are deleted after three days. Shared links last 30 days. Sign-in sessions end after at most 30 days without use, and 90 days after signing in however often they are used. Expired sessions and links are deleted within about an hour. Hosting logs are deleted after about 30 days.

Your rights

Wherever you live, you can ask us to:

• tell you what we hold about you, and give you a copy in a common machine-readable format (JSON);
• correct it;
• delete your account and everything in it (you can also do this yourself on the Account page);
• stop or limit using it for a purpose you object to.

You can download a copy of your account, trips, shared links, daily counts and withdrawals yourself with “Download your data” on the Account page, on any plan. For anything else, or if you prefer, email hello@michiplan.com from the address you sign in with, so we know the request is yours. It costs nothing, and we answer within 30 days. These rights include what laws such as the EU’s GDPR require. If you are unhappy with our answer you can complain to the data protection authority where you live.

If you live in California or another US state with a privacy law: we do not sell or share your personal information for advertising, and do not use sensitive personal information. Because we do not track you across other sites or share what you do here, there is nothing for a “Do Not Track” or Global Privacy Control signal to turn off.

Other sites

Michiplan links to other sites, such as Google Maps, railway operators, hotels and Ko-fi, where a tip can be given. What they do with your data is covered by their own privacy policies, not this one.

Children

Michiplan is not meant for children under 13 (or under the age at which your country lets you agree to an online service yourself, if that is higher), and we do not knowingly keep their data. If you believe a child has signed up, tell us and we will delete the account.

Changes

If we change this page we will update the date at the top, and tell you in the app or by email before a significant change takes effect.