Privacy Policy
Last updated: 29 July 2026. This policy describes how we handle personal data when you use skipthetraps.com.
1. Controller
Smart Consumer GesbR
Viktorgasse 14, 1040 Wien, Austria
Email: hello@skipthetraps.com
2. What we collect and why
2.1 Trip preferences (planner form)
City, dates, group size, interests, budget and pace that you enter into the planner. This data is sent to our AI provider to generate your itinerary. We do not store it on our servers after the response is returned.
Legal basis: performance of a contract (Art. 6 (1) (b) GDPR).
2.2 Newsletter & free-sample signup
When you request the free Vienna sample or sign up to the newsletter, we store:
- Your email address
- The consent timestamp and the language/source of the form
- A hashed IP fragment and truncated user-agent for spam protection
We use this data to send you the sample and occasional travel tips. You can unsubscribe at any time from any email or by writing to hello@skipthetraps.com.
Legal basis: your consent (Art. 6 (1) (a) GDPR).
2.3 Payment (Stripe)
Paid itinerary unlocks are processed by Stripe Payments Europe, Ltd. (Dublin, Ireland). We never see or store your full card number. Stripe receives the payment amount, currency, a reference to the itinerary you are unlocking, and the technical information required to complete the transaction. See stripe.com/privacy.
Legal basis: performance of a contract (Art. 6 (1) (b) GDPR).
2.4 Analytics & advertising — Meta Pixel
We use the Meta Pixel from Meta Platforms Ireland Ltd. to measure the effectiveness of our marketing. The pixel is loaded with geo-based consent:
- Visitors in the EEA, the UK and Switzerland see a consent banner on first visit; the pixel loads only after you click Accept.
- Visitors outside those regions can opt out at any time via Cookie settings in the footer, which disables further tracking.
Data transferred to Meta may leave the EU/EEA. Meta relies on Standard Contractual Clauses for such transfers.
Legal basis: consent (Art. 6 (1) (a) GDPR / § 165 (3) TKG 2021) in the EEA; legitimate interest (Art. 6 (1) (f) GDPR) in other regions where legally permitted, subject to your right to object.
2.5 Hosting & infrastructure
Server logs (IP address, timestamp, requested URL, user-agent) are processed by our hosting and database providers strictly to operate, secure and troubleshoot the service. We use Lovable Cloud (application and database), Cloudflare, Inc. (edge delivery and DNS) and Stripe (payments).
Legal basis: legitimate interest in operating a secure service (Art. 6 (1) (f) GDPR).
3. Sharing
We do not sell your personal data. We share it only with the processors named above, each bound by a data-processing agreement, and only to the extent needed to deliver the service.
4. Retention
- Trip preferences: not retained after the itinerary is generated.
- Newsletter data: until you unsubscribe or request deletion.
- Payment records: retained by Stripe and in our accounting records for the period required by Austrian tax law (currently 7 years).
- Server logs: kept for a short period for security and troubleshooting, then rotated out.
5. Your rights under GDPR
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion ("right to be forgotten")
- Restrict or object to processing, including direct marketing
- Data portability
- Withdraw a consent you have given (this does not affect the lawfulness of processing before withdrawal)
To exercise any of these rights, write to hello@skipthetraps.com.
6. Right to lodge a complaint
You may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria — dsb.gv.at.
7. Cookies & local storage
We use a small amount of browser storage to remember your language preference, your A/B pricing variant, your consent choice and your in-progress itinerary during a session. Marketing/tracking cookies from Meta are only set with consent as described in section 2.4.
8. Contact
Privacy inquiries: hello@skipthetraps.com