1. Who we are
LeavePrints is operated by Josh Dean trading as LeavePrints. For UK data protection law, Josh Dean is the controller of the personal data described in this notice.
Email: hello@leaveprints.com
2. What personal data we collect
Account data
When you register, we collect your username and email address. We store a secure hash of your password rather than the password itself. We also record whether your email has been confirmed and, for new accounts, when and under which version of the Terms you agreed to use LeavePrints.
Trip and planner data
We store the trips you choose to save, which can include route stops, nights, dates, travel style, display currency, estimated costs, transport choices, transport costs and transport notes.
Public sharing data
If you explicitly make a trip public, LeavePrints creates an opaque sharing link so other people can view that Print. Public sharing is off by default.
Explore engagement
If you make a Print public, your LeavePrints username may be shown with that Print on the Explore page. When signed-in travellers save a public Print or use it to create a saved trip, we store their internal user ID, the public trip ID, the action type and a timestamp. We use these records to provide saved Prints, source-route attribution, creator points and product analytics. We do not award points for anonymous views or clicks.
Technical and security data
When you use LeavePrints, technical data such as IP address, request details, timestamps, browser information and security events may be processed by LeavePrints and its hosting providers. We use this to operate the service, prevent abuse, investigate errors and protect accounts.
First-party product analytics
LeavePrints records a small set of product events in its own database so we can understand whether the beta is useful — for example, opening the planner, adding the first or second city, saving a trip, enabling a public Print or loading a shared route. Authenticated events can be associated with your internal user id. For anonymous planner sessions, we use a random first-party session identifier to understand the path from building a budget to saving it. It is not a browser fingerprint and is not based on your identity. When present, we also record campaign tags from LeavePrints links and the referring site's hostname (not the full referring URL) to understand which content sends useful traffic. The analytics event store does not record your email, username, IP address, browser fingerprint or free-form trip notes.
Emails and support
We process your email address to send transactional messages such as email confirmation and password-reset links. If you contact us, we also process the information you include in that message.
Feedback and data reports
If you report inaccurate city data, we store the report text, optional source link, the internal account id that submitted it, and a snapshot of the relevant city-cost figures so we can investigate and improve the dataset. If the account is later deleted, the report can be retained without the account link where it remains useful for data quality and audit purposes.
3. Why we use your data and our lawful bases
| Purpose | Typical data | Lawful basis |
|---|---|---|
| Create and operate your account | Username, email, password hash, confirmation status | Contract |
| Save, calculate and display your trips | Trip, route, cost and transport data | Contract |
| Create and serve a public Print when you choose to share one | Selected trip and sharing data | Contract |
| Email confirmation, password reset and essential service messages | Email address and account identifiers | Contract and legitimate interests in account security |
| Protect the service, prevent abuse and diagnose faults | IP address, request and security data | Legitimate interests in security, reliability and fraud prevention |
| Investigate traveller reports and improve city-cost data | Report text, optional source link, city-cost snapshot and internal user id | Legitimate interests in maintaining an accurate and useful travel-planning service |
| Measure whether core beta features are useful and improve the product | Limited product events, timestamps and internal user id where logged in | Legitimate interests in understanding and improving LeavePrints |
| Meet legal obligations and respond to valid requests | Relevant account, communications or transaction records | Legal obligation |
We do not currently use your LeavePrints account data for behavioural advertising, sell your personal data, or make legal or similarly significant decisions about you using automated profiling.
5. Public Prints
A trip is private unless you choose to make it public. Once enabled, anyone who obtains the public link may be able to view the trip information included on that public page and copy the route into their own planner.
Do not put sensitive or identifying information into content that you intend to share publicly. You can revoke a public share from LeavePrints, but we cannot control copies, screenshots or information already saved by someone else.
7. How long we keep personal data
Account and saved-trip data is generally kept while your account remains active because it is needed to provide LeavePrints. You can permanently delete your account yourself from Account settings. Self-service deletion removes the account, saved trips, public trip links, account-linked analytics events and data reports submitted by that account from the active service. Limited information may still be retained where we genuinely need it for legal, security or dispute-resolution reasons.
Limited copies may remain temporarily in routine backups, email-delivery records or operational logs until those systems rotate or expire them. Security and diagnostic information is kept only for as long as reasonably necessary for the security and reliability purpose for which it was collected.
Until self-service account deletion is available, you can request deletion at hello@leaveprints.com.
8. International transfers
Some providers that support LeavePrints may process data in countries outside the UK. Where UK data-protection law requires safeguards for a transfer, we rely on legally recognised mechanisms used by the relevant provider, such as adequacy regulations or approved contractual safeguards.
9. Security
We use measures intended to protect personal data, including HTTPS, password hashing, email confirmation, access controls, CSRF protection, rate limiting and security headers. No internet service can guarantee absolute security, so please use a strong, unique password and contact us if you believe your account has been compromised.
10. Your data-protection rights
Depending on the circumstances, UK data-protection law can give you rights to:
- be informed about how your personal data is used;
- access a copy of your personal data;
- correct inaccurate or incomplete data;
- ask for erasure of personal data;
- restrict certain processing;
- object to certain processing based on legitimate interests;
- receive certain data in a portable format; and
- complain to the Information Commissioner's Office (ICO).
To exercise a right, email hello@leaveprints.com. We may need to verify your identity before acting on a request.
You can also contact the UK Information Commissioner's Office at ico.org.uk.
11. Children
LeavePrints is designed for independent travellers and is not directed at children. If you believe a child has provided personal data to LeavePrints inappropriately, please contact us so we can review it.
12. Changes to this notice
We may update this Privacy Policy as LeavePrints changes or legal requirements develop. The date at the top shows the latest version. Material changes will be communicated in a reasonable way where appropriate.
13. Contact
Josh Dean trading as LeavePrints
Email: hello@leaveprints.com