FARSTEPSFarsteps ("we", "us") is operated by Trading Fusion LLC, 2880 W Oakland Park Blvd, Suite 225C, Oakland Park, FL 33311, USA. Contact: hello@farsteps.com. This policy explains what we collect on farsteps.com and app.farsteps.com, why, and your rights — written to meet the EU GDPR, because that's where we and many of our users live.
What we collect
- Account data — email address, display name and password hash (or your Google account identifier if you sign in with Google). Legal basis: contract (Art. 6(1)(b) GDPR).
- Travel data you create — trips, stops (place names, coordinates, dates), transport modes, journal notes, and who you invite to a trip. This is the product; we store it so you can use it. Legal basis: contract.
- Schengen/day counts — computed on the fly from your stops; not an extra data category.
- Technical logs — our hosting and database providers keep short-lived server logs (IP address, timestamps) for security and operations. Legal basis: legitimate interest (Art. 6(1)(f)).
We do not run ads, we do not sell or share your data for advertising, and we do not use tracking cookies.
Where your data lives (processors)
- Supabase (database & authentication) — hosted in the EU (Frankfurt, eu-central-1).
- Resend (transactional email: confirmation, password reset) — EU region (Ireland, eu-west-1).
- Vercel (website & app hosting/CDN).
- CARTO / OpenStreetMap (map tiles) and Photon by komoot (place search) — when you view a map or search a place, your browser requests data from these services; your IP address is technically transmitted, no account data is.
Fonts and scripts are served from our own domain — no Google Fonts requests leave your browser.
Sharing you control
Trips are private by default. If you invite someone to a trip, they see that trip. If you switch a trip to public, anyone with the link can view it — you can switch it back anytime. Your live location is never on a public page; only the stops you logged.
Retention & deletion
We keep your data while you have an account. Delete a trip and it's gone from our production database. To delete your entire account and all data, email hello@farsteps.com from your account address — we complete deletion within 30 days.
Your rights (GDPR)
Access, rectification, erasure, restriction, portability, objection — email us and we'll act within a month (Art. 12(3)). You may also complain to your local supervisory authority.
Changes
We'll update this page when practices change and adjust the date above. Material changes will be announced in the app.