Privacy Policy

TravelP2P (“TravelP2P”, “we”, “us”) operates a peer-to-peer travel deals platform where travellers submit real trip budgets that our editors verify before publication. We act as the data controller for the personal data described below.

Account data. Your email address, a display name, an optional avatar and bio, and the timestamp of your registration. If you sign in with Google, we receive your email, name and profile picture from Google — never your Google password.

Trip submissions. Everything you enter on the Share Trip form: destination city and country, origin and destination airports, airline, booking source, travel month and year, number of nights, total cost, cost breakdown, amenities (including any custom amenity you add yourself), category, season, summary, local warnings and P2P wisdom, plus an optional cover image.

Verification material. To confirm a deal is real, our review process may involve a bank statement line, booking confirmation or receipt that you send us. This material is used solely for verification. It is never published, never attached to the public trip record, and is deleted once the submission has been approved or rejected.

Community content. Comments you post on trips, and the trips you save to your archive.

Technical data. Standard server and security logs (IP address, browser type, timestamps) generated when you use the site, plus the session token stored in your browser to keep you signed in.

What we deliberately do not collect:

• Payment card numbers or bank credentials — we never process payments on your behalf.
• Passport numbers, booking references (PNRs) or passenger names — redact these before sending anything.
• Precise location data or device tracking identifiers.

• To run your account — authentication, email verification, the 7-day trial window, and your saved trips (legal basis: performance of a contract).
• To verify and publish trips — our editors review each submission against the material you provide so the feed stays honest (legitimate interest in a trustworthy marketplace).
• To operate the community — displaying your display name and avatar next to your published trips and comments.
• To keep the platform safe — spam prevention, abuse investigation, and enforcing our Terms.
• To send service email — verification links, password resets, submission approvals or rejections. We do not send marketing email unless you explicitly opt in, and every opt-in email carries an unsubscribe link.

We do not sell your personal data, and we do not use it to train third-party advertising profiles.

Public to anyone, including logged-out visitors: approved trip submissions, your display name, avatar and bio, and your comments on approved trips.

Private to you: your email address, your saved trips, your pending or rejected submissions, and any verification material. Your email address is technically restricted at the database level — it cannot be read by other users of the platform, signed in or not.

If you would rather not be identifiable, set a pseudonymous display name; nothing requires your real name.

New accounts must confirm ownership of their email address via the link we send at sign-up. Until that link is clicked, the account can browse but cannot submit trips or comment — this is what keeps throwaway accounts out of the verified feed.

Every verified account starts a 7-day trial of full contributor access. We store the trial start and end timestamps against your account and use them only to determine what you can do on the platform and to send you a reminder before the trial ends. If your email is not verified within 7 days of sign-up, the unverified account and any draft data attached to it are deleted automatically.

Some outbound links on TravelP2P — for example to money and card providers such as Revolut, travel insurers such as Allianz, and booking or eSIM partners — are affiliate links. If you open one and sign up or buy, we may earn a commission at no extra cost to you.

Affiliate relationships never influence editorial placement: they do not affect whether a trip is approved, how it ranks in the feed, or what price we report. A trip is verified on its receipts alone.

When you follow an affiliate link, the partner may set its own cookie and receive your IP address and referral identifier. That processing is governed by their privacy policy, not ours. We do not pass your email address, account details or submission data to affiliate partners.

We use strictly necessary cookies and local storage to keep you signed in and to remember interface preferences. We do not run third-party advertising trackers. Affiliate partners may set cookies on their own domains after you click through, as described above.

• Cloud database, authentication and storage — hosts your account, trips, comments and saved items.
• Transactional email provider — delivers verification, reset and moderation emails, and routes new submissions to our internal review inbox.
• Hosting and CDN — serves the site and keeps security logs.
• Google — only if you choose Google sign-in.

Each processor is bound by a data processing agreement and may only act on our instructions. Where data is transferred outside the EEA/UK, it is covered by Standard Contractual Clauses or an adequacy decision.

• Account and profile — until you delete your account.
• Verification material — deleted as soon as the submission is approved or rejected.
• Unverified accounts — deleted 7 days after sign-up.
• Rejected submissions — kept 90 days so you can appeal, then deleted.
• Security logs — kept up to 12 months.

You can access, correct, export, restrict or delete your personal data, object to processing based on legitimate interests, and lodge a complaint with your national data protection authority.

Deleting your account. Request deletion from your account area or by replying to any service email. We action it within 30 days. Deletion permanently removes your profile, email address, saved trips, comments and any pending submissions. Trips that were already published may remain in the feed as anonymised entries with your name and avatar removed, because other travellers rely on that price history — tell us if you want a published trip taken down entirely and we will remove it.

Read the companion Terms of Service for the rules that govern submissions and account use.

TravelP2P is not intended for anyone under 16, and we do not knowingly collect their data. If this policy changes materially, we will update the date above and notify signed-in contributors by email before the change takes effect.