Privacy, in plain travel language.

01YOUR DATA

Who is responsible

City Atlas Club is operated by Morrowstack Studio. For questions, access requests, corrections, or deletion requests, contact hello@cityatlasclub.com. This policy applies to cityatlasclub.com and its language versions.

02YOUR DATA

Information we receive

When you send a community note, we receive the place or city, your tip, your name, your email address, and any optional photo you choose to upload. The free planner sends your chosen city, trip length, pace, interest, and optional needs to Cloudflare Workers AI for that generation. A planner draft may remain in this browser tab while you move from the home page to the planner and is removed after a successful generation. We do not write the free-text needs or generated free itinerary to our database while you use the anonymous free planner; the result can be stored locally in your browser. If you activate Plus from that result, the generated itinerary is saved with your membership so it can be reopened across devices, but the free-text needs are not carried into that saved trip.

When an active Plus member builds a new trip, the selected city, language, trip length, and free-text preferences are sent to Cloudflare Workers AI. We save that preference text and the resulting itinerary with the member’s saved trip so it can be reopened or deleted from the private workspace. While a Plus request is unresolved, the same request and an opaque retry key may remain in the current browser tab for up to 24 hours. The server-side retry record stores one-way identity, key, and request hashes plus operational date, state, temporary processing window, quota, and saved-trip reference fields; it does not store the preference text or itinerary.

To enforce one successful free AI trip per browser, we set a long-lived opaque first-party HttpOnly cookie and retain only its one-way hash with the anonymous allowance record. That record contains the first-use date, city, language, structured preference categories, generation status, result-rendered status, whether the Plus prompt was used, and a one-way hash of a transfer capability. It does not contain your free-text needs, itinerary, email, raw IP address, or browser fingerprint. The transfer capability stays in your browser and is sent only if you explicitly save that result to an active Plus account. Clearing browser data can reset this best-effort browser allowance; it is not verified natural-person identity. Turnstile, a limited technical retry budget, and a daily service capacity protect against abuse.

Before Turnstile confirms a planner request, we also increment an unverified daily aggregate by entry point, city, language, trip length, pace, and interest. This aggregate contains no cookie hash, free text, exact time, email, raw IP address, user agent, browser fingerprint, or itinerary. It helps us find where the planning flow is unclear, but it is not treated as a verified person or completed plan.

Payments are processed by Creem for the Morrowstack Studio store. City Atlas Club does not receive or store your full card number. Creem processes payment and billing information under its own terms and privacy policy. Cloudflare provides hosting, security, database, image, and Turnstile anti-abuse services and may process request data to provide those services.

03YOUR DATA

How we use and retain information

We use submitted information to review contributions, contact you about a correction, prevent spam, operate memberships, answer support requests, protect the service, and understand whether the publication is useful. The one-way free-planner allowance hash is retained to enforce one successful free browser result; daily aggregate funnel records use a shorter operating retention window. Pending or rejected contributions may be retained for moderation and abuse prevention; published contributions may be retained with the credit you approved. We keep account and transaction records only as long as reasonably needed for service, legal, tax, fraud-prevention, and dispute purposes.

We do not sell personal information. We may share limited data with service providers that operate the site, process payments, prevent abuse, or deliver advertising, subject to their roles and applicable law.

04YOUR DATA

Google advertising cookies

Third-party vendors, including Google, may use cookies to serve ads based on a visitor’s prior visits to City Atlas Club or other websites. Google’s use of advertising cookies enables Google and its partners to serve ads based on visits to this site and other sites on the internet. Visitors can opt out of personalized Google advertising in Google Ads Settings at adssettings.google.com/ and can learn about additional industry opt-out choices at www.aboutads.info/.

If other advertising vendors or networks are used, we will identify them or provide access to the relevant vendor list and privacy choices. For visitors in the EEA, the United Kingdom, and Switzerland, we use a Google-certified consent management platform where required before personalized advertising is served.

05YOUR DATA

Your choices

Depending on where you live, you may ask to access, correct, delete, restrict, or object to certain uses of your personal information. You may also withdraw consent where processing depends on consent. Email hello@cityatlasclub.com with enough information for us to identify the relevant submission or account. We may need to verify the request before acting on it.