Privacy Policy
Last updated: November 5, 2026
Atlas is run by Devin LaMontagne, a sole proprietor based in Minnesota. This page explains what information Atlas handles, where it goes, and your choices. Short version: we collect as little as we can, we don't sell data, and there are no ads or analytics trackers.
What we store on our servers
While Book It is free, Atlas has no accounts and stores nothing about you on its servers. The table below applies only if paid plans are switched on.
| Data | Why | Where |
|---|---|---|
| Your email address | To sign you in with a one-time link and attach purchases to your account | Supabase (our database and sign-in provider) |
| Purchase records: which trip or plan you bought, when, Stripe reference IDs, plan expiry date | To unlock Book It on any device you sign in on | Supabase |
| Payment details, billing country/address and tax information | To charge you and calculate tax | Stripe / Link only. As merchant of record they process this under their own privacy policy. We never receive your full card number. |
When you load Book It links, the destination, dates, traveller count and origin city you chose are sent to our server to build the links. We don't keep a log of them beyond normal short-lived hosting logs (Cloudflare).
Travelpayouts (affiliate link conversion)
To turn Book It links into affiliate links, our server sends those links to Travelpayouts (our affiliate network) and gets tracked versions back. Exactly what's sent, inside the booking URLs:
- your destination (place name and country) and, when found, the origin and destination airport codes
- your travel dates (departure and return)
- your party size: number of adults, children and rooms, plus cabin class
- the origin city you're flying from
- our own affiliate IDs (Atlas's marker and project ID, not yours)
It's a server-to-server request: Travelpayouts does not receive your IP address, browser details, name, email or any identifier for you. It happens only while affiliate tracking is switched on, and Travelpayouts handles the data under its own privacy policy. If the request fails, you get the plain, untracked links.
What stays in your browser
Saved places, your trip plan, recent searches and cached place data are stored in your browser's local storage on your device. We never receive them. Clearing your browser data removes all of this.
Services your browser talks to directly
To show live information, your browser requests data from these public services. Like any website, they receive your IP address and the request (for example, the place you looked up):
- Open-Meteo (weather), Wikipedia, Wikidata and Wikimedia Commons (place info and photos), OpenStreetMap / Overpass (nearby places), REST Countries, Nager.Date (public holidays), travel-advisory.info, and exchange-rate providers (open.er-api.com / ExchangeRate-API).
- Google Fonts, which serves the typefaces. All of Atlas's own code, libraries and globe images are served from this site.
- When you click a Book It link, you go to that company's website and their privacy policy applies.
Affiliate links
Some Book It links are affiliate links, marked on the page with a short disclosure. If you book through one, the booking partner (for example Booking.com, Expedia or GetYourGuide) or an affiliate network (for example Travelpayouts) may pay us a commission. It costs you nothing extra.
- To credit the booking to Atlas, the affiliate network and the booking partner may set cookies or similar identifiers in your browser when you click. Those cookies are theirs, set on their own websites under their own privacy and cookie policies, and they typically last from a session to about 30 days.
- We don't receive your name, payment or booking details. We only see aggregate reports such as number of clicks, bookings and commission earned.
- You can block or delete these cookies in your browser settings, or use the partner's own cookie controls. Links still work without them; we just don't get credit.
Who we share data with
Only the services that run Atlas:
- Cloudflare: hosting, content delivery and security filtering (it sees your IP address to deliver the site and block abuse; short-lived request logs).
- Travelpayouts: affiliate link conversion. Receives destination, dates and party size inside the booking links, as described above, and nothing that identifies you.
We don't sell or rent personal information and don't share it for advertising.
Cookies
Atlas itself doesn't set advertising or analytics cookies. Booking partners and affiliate networks may set cookies when you follow an affiliate link (see "Affiliate links" above). Sign-in keeps a session token in your browser's local storage so you stay signed in. Stripe sets its own cookies on its checkout page for fraud prevention. Our host, Cloudflare, may set a strictly necessary security cookie (such as __cf_bm or cf_clearance) if it needs to check that a visitor isn't a bot; it isn't used for advertising.
How long we keep it
We keep your account and purchase records while your account exists. Payment records may need to be kept longer for tax and accounting law (typically up to 7 years) in Stripe and our books.
Your choices and rights
- Ask for a copy of your data, a correction, or deletion of your account by emailing us. We'll respond within 30 days.
- Deleting your account removes your email and purchase records from Supabase, except records we must keep for tax law.
- Depending on where you live (for example the EU/UK under GDPR, or California under CCPA/CPRA), you may have additional rights; contact us to use them.
Children
Atlas isn't directed at children under 13 (or 16 in the EU/UK), and we don't knowingly collect their information.
Changes
We'll update the date above when this policy changes and highlight significant changes on the site.
Contact
Operator: Devin LaMontagne (sole proprietor), Minnesota · atlastrips.help@gmail.com