Privacy Policy · OdysseyRoute

1. Who is responsible for your data

OdysseyRoute is an independent project, built and run by a solo developer. There is no company behind it and no support team — just one person who answers the email. You can reach us at support@cinema-travel.com.

For the data described below, OdysseyRoute is the data controller. Because this is a one-person project, there is no separate data protection officer — privacy requests go to the same address as everything else, support@cinema-travel.com, and are handled by the person who runs the site.

2. What we collect

Three things, and nothing else:

Your email address — you type it in to receive the guide. We use it to deliver your PDF, to send you free updates for a year, and to handle refunds and support.
Your quiz answers — if you use the quiz, your answers about travel style, destinations, trip length, budget and dates. They are used to personalise which route we recommend, and in aggregate to understand which options people pick.
Usage data — pages and screens viewed, sections that came into view, buttons clicked, and steps completed. This arrives with the usual technical details a browser sends: IP address, user agent, device type, referring page, and approximate location derived from the IP.

3. What we deliberately do not collect

We never see or store your card details. Payment happens entirely on Creem’s own checkout page.

We do not send your email address to our analytics provider. Analytics records that an email step was completed, not what you typed.

We do not ask for your name, postal address, or phone number, and we do not buy or enrich data about you from third parties.

4. Why we are allowed to use it (legal bases)

To deliver what you bought and provide support — performance of our contract with you (GDPR Art. 6(1)(b)).
To send free guide updates for a year, which is part of the product you paid for — performance of that contract.
To keep records of sales as required for accounting and tax — compliance with a legal obligation (Art. 6(1)(c)).
For analytics and quiz personalisation — your consent, where consent is required, and otherwise our legitimate interest in understanding and improving the site (Art. 6(1)(a) / 6(1)(f)). You can withdraw consent or object at any time by emailing us.

5. Who we share it with

We do not sell your personal data, ever, and we do not share it for anyone else’s advertising. We use a small number of service providers:

Creem — the Merchant of Record that sells and processes your purchase, and delivers your PDF with your receipt. Receives your email address and order details, and acts as an independent controller for the transaction under its own privacy policy.
PostHog — product analytics. Receives usage data and quiz answers, not your email address. Hosted in the United States.
Neon — the managed Postgres database holding order records, including your email address.
Vercel — hosting and content delivery for this site. Processes request data such as IP addresses in server logs.

6. International transfers

Some of these providers are located outside the EU and EEA — in particular our analytics provider, which is hosted in the United States. Where personal data is transferred internationally, it is done under appropriate safeguards, such as the European Commission’s Standard Contractual Clauses together with the provider’s data processing agreement.

7. Cookies and similar technologies

Our analytics provider sets cookies and uses browser storage to recognise a returning browser and to tie events in one visit together. These are analytics cookies, not advertising cookies — we run no ad networks and no cross-site tracking pixels.

The quiz also stores your answers in your browser’s sessionStorage so a refresh does not lose your progress. That data lives only in your browser and is discarded when you close the tab.

You can block or delete cookies in your browser settings. The site remains usable if you do.

8. How long we keep it

Order records, including your email address: kept while we owe you the product and free updates, and afterwards for as long as we are required to retain records of sales.
Analytics data: retained by our analytics provider under its own retention settings, and used by us only in aggregate.
Quiz answers in your browser: discarded when you close the tab.

9. Your rights

If you are in the EU, EEA or UK, you have the right to access your data, correct it, have it deleted, restrict or object to how we use it, receive a copy in a portable form, and withdraw consent where we relied on it.

To exercise any of them, email support@cinema-travel.com. We will respond within one month. We may need to confirm you control the email address in question before we act — that is to stop someone else requesting your data.

If you think we have handled your data badly, please tell us first and we will try to fix it. You also have the right to complain to your local data protection authority.

10. Security

The site is served over HTTPS, card data never reaches our servers, and access to the order database is restricted to the application and to the person who runs it. No system is perfectly secure, but we keep the amount of data we hold small deliberately, which is the most effective protection we can offer.

11. Children

OdysseyRoute is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email us and we will delete it.

12. Changes to this policy

If we change how we use personal data, we will update this page and the date at the top. Material changes will be described here rather than made quietly.

13. Contact

Any privacy question or request: support@cinema-travel.com. We reply within 1 business day.