somewhere

Privacy policy

Last updated 7 October 2026

somewhere🎉 is a small, independent website run by one person in the UK. It's built to collect as little about you as possible. This page explains what it does keep, why, and what you can do about it.

What we keep

  • The organiser's email address, as a fingerprint only. When you sign in, your email address is used once to send the sign-in link and is then thrown away. We keep a one-way hash of it (SHA-256) so we recognise you next time. We can't turn that back into your address.
  • Names and colours. Family members type a name and pick a colour. A first name or nickname is all that's needed.
  • Your family's holiday plans. Trips, places, ideas, notes, ratings, photo links, points, vetoes, swipes and draw results that your family adds, plus the home airport and station you set.
  • A sign-in cookie. One cookie keeps each device signed in (up to 180 days for the organiser and a year for family members). We only store a hash of it. It is needed for the site to work, so there's no cookie banner. Your browser also remembers a few preferences, such as light or dark mode and who you are on this device.

We don't use passwords, ads, analytics or tracking, and we don't sell or share your data with anyone for marketing. Anyone with your family link can see your family's trips and ideas, so keep it private.

Services that help run somewhere🎉

  • Cloudflare hosts the site and its database. Like any web host it sees your IP address and keeps short-lived logs for running and securing the service.
  • Resend sends the sign-in emails, so it receives the organiser's email address for that purpose.
  • OpenStreetMap draws the maps and powers place search. Your browser loads map tiles from it directly, and the place names you search for are sent to it from our server.
  • Google Fonts provides the lettering, so your browser fetches fonts from Google.
  • If you add a cover photo link, the picture loads from whichever site it's hosted on.

How long we keep it

Sign-in links expire after 20 minutes and are deleted within a day. Your family's data stays until the organiser deletes it. Deleting your account in Settings removes everything straight away. Signing out ends that device's session straight away.

Your rights

Under UK data protection law you can ask to see, correct or delete the data we hold about you, or object to how it's used. The organiser can remove people, delete trips and ideas, or delete the whole account and everything in it from Settings. For anything else, contact us. You can also complain to the Information Commissioner's Office (ico.org.uk).

somewhere🎉 is for families planning holidays together. The organiser should be an adult, and decides who in the family gets the link.

Changes

If we change what we collect, we'll update this page and the date at the top.