Privacy

Accounts are optional. The whole site works without one, and without one nothing on this page changes: no cookies, nothing sent to us. If you do make one, the next section is yours.

With an account. We hold your email address — to sign you in, to confirm it is yours, and to send the emails you ask for, a verification link or a password reset. Those are delivered by Resend, our sending provider. Being signed in sets two cookies, which is what being signed in means; they last thirty days and go when you sign out. What you choose to sync — saved countries, checklist ticks, day-counter trips and your light-or-dark choice — is kept with Cloudflare in the European Union. You can delete the account yourself, on your account page, immediately and completely — everything synced included. If you sign in with Google, Google tells us who you are and that is all.

Whether we can read what you save is your choice, and it starts as ours to read. This is the thing on this page we would most hate you to assume, so here it is plainly. An ordinary account is the easy kind: you sign in and everything is simply there, on every device, with nothing to choose and nothing to remember — and that works because we hold the key, so we could read your saved things if we went looking. We don't, there is nothing in it for us, and we would far rather tell you than let you imagine otherwise.

You can change it in one step on your account page. Choose a passphrase and the key is locked with it on your own device before it ever reaches us; from that moment we cannot read your saved things at all, and could not hand them over if we were asked. Nothing you have already saved is lost or altered by switching. The cost is real and it is the reason this is not the default: forget that passphrase and lose your recovery key, and what you saved is gone, because we will not be able to help you. Either way we can see the names of what you sync — that an account has saved countries — and with the locked kind, never which ones.

No analytics, no tracking cookies. We don't currently run any analytics at all. If that ever changes it will be a privacy-respecting counter that stores nothing about you as an individual — and this page will say so before it happens, on the same day, because the two are switched on together and the build refuses to separate them.

What stays on your device. Seven things: your theme choice, where you told us you're travelling from, how you last left the country list, the countries you saved, your packing checklist ticks, the trips you put into the day counter, and the pages you have opened, kept so the site still works when your signal does not. That last one is much the largest, and two corrections are owed on it. It happens on every visit, not only if you install the site to your home screen, and this page used to imply otherwise. It also survived the button that claimed to clear everything, until August 2026. Both are fixed, and the storage page now lists every one of them with a button that deletes each, plus a second button that stops the site storing anything at all. Signed out, none of it is sent to us and we cannot see any of it. Syncing keeps two more small things on the device — its own notebook, and this device's key — both on the storage page like everything else.

How we guess where you are. If you haven't told us, we ask your browser what time zone it is set to and turn that into a country. That happens on your device; your time zone isn't sent to us and neither is the answer. We deliberately don't use your IP address, even though it would be more precise, because more precise isn't what we need.

Third parties, exactly. Pages are served by Cloudflare, our hosting provider, which sees requests the way any web host does. Until August 2026 one other thing left your device: the tools page asked a third party for exchange rates, which disclosed your IP address to them. The rates now come with the page, so nothing is asked of anyone. Country pages offer a map, and where Street View exists a look-around, each behind a button. Nothing is requested from Google until you press one; pressing either loads Google Maps into the page, which discloses your IP address to Google from that moment, and the card says exactly that where it sits. Those are the only two calls that reach a third party on their own, and both are your choice. From August 2026 a country page also fetches a live forecast, and that one loads by itself. It does not go to the weather service — it comes to us, and we ask them. So the Norwegian Meteorological Institute, whose data it is, never sees you: no IP address, no page, nothing. What it does mean is one extra request to our own server naming the country you are reading, which is a thing our server already knew, because it just sent you that page. We cache the answer for half an hour, so most of the time nobody is asked at all. An account adds two more, both equally your choice: Resend delivers our emails to you, and — only if you press their button — Google handles the sign-in you asked it to. When you follow a link to an official government site or (in future) a booking site, you're subject to their privacy policy from that moment, not ours.

Email. An account has an email address on it, used for the things above and nothing else. A newsletter is a separate thing: it does not exist yet, and when it does it will be strictly opt-in, with a working unsubscribe.

Who is responsible. This site is run from the United Kingdom by a sole trader, and the data controller can be reached at the address and email below. We are registered with the Information Commissioner's Office under reference ZC219250, which you can check on their public register.

The Data Controller
The Waterfront, Welham Street, Grantham, NG31 6QQ, United Kingdom
hello@goodtimetogo.com

Ask to see or delete anything we hold, or complain about how we have handled your data, by writing to that address. You can also complain to the Information Commissioner's Office at ico.org.uk without coming to us first.