How we handle
your data.

Account information. When you sign up, we store your email address and a hashed password (via Supabase Auth). We do not store your password in plain text.

Conversation history.Messages you send to the agent and the agent's responses are saved to your account so you can pick up where you left off across devices. You can view your history in your profile.

Trip cards. Flight and hotel searches the agent generates on your behalf are saved alongside your conversation so you can revisit them later.

Referral click attribution. When you click a booking link (e.g., to Skyscanner or Booking.com), we generate a random UUID and pass it to the booking partner. If the partner later notifies us that a booking was completed, we use that UUID to match the referral — purely for accounting purposes. We do not store any payment details.

Local preferences. Your dark/light theme preference and chosen booking partner (e.g., Skyscanner, Kayak) are stored in your browser's localStorage. This data never leaves your device unless you're signed in, in which case your partner preference is also saved to your account.

Session cookies. Supabase Auth uses a short-lived session cookie to keep you logged in. This cookie is necessary for authentication and is deleted when you sign out.

Pocket Travel Agent participates in affiliate programs with the following booking partners. When you click a booking link and complete a purchase, we may earn a small commission from the partner. This commission is paid by the partner, not by you, and does not affect the price you pay.It also does not influence the travel advice you receive — the agent's job is to find you the best trip, full stop.

Booking.com's affiliate program is operated by Commission Junction (CJ Affiliate), a division of Conversant LLC. When you click a Booking.com link on this site, CJ may place a tracking cookie in your browser to attribute the referral and credit any resulting commission. This is standard affiliate tracking — it does not give CJ or Booking.com access to your PTA account or conversation history.

You can learn more about how CJ handles your data, opt out of interest-based advertising, or request deletion of your data by visiting the Conversant / CJ Privacy Policy. You may also opt out of CJ tracking via the Network Advertising Initiative opt-out tool.

We use your data for one purpose: making Pocket Travel Agent work for you. Conversation history is used to give the agent context when you return to a session. Your email is used for authentication only — we don't send marketing emails. Your partner preference is used to deep-link you to the booking site you've chosen.

We do not sell your data. We do not share your personal information with third parties except as required to operate the service (Supabase for database and authentication, Anthropic for AI processing, and booking partners for the affiliate link click UUID described above).

Anthropic. Messages you send to the agent are processed by Anthropic's Claude API. Anthropic's privacy policy governs how they handle API data. We do not send your account information (email, etc.) to Anthropic.

You can view your saved trips and conversation history from your profile page. To request deletion of your account and all associated data, email [email protected] with the subject line “Delete my account.” We'll process the request within 30 days.

Anonymous usage (without an account) is not tied to any personal identifier. Preference data stored in localStorage is fully under your control and can be cleared via your browser settings at any time.

We may update this policy as the service evolves — particularly as new affiliate programs are added. The “last updated” date at the top of this page will reflect any changes. We won't start collecting new categories of personal data without updating this page first.

Questions about this policy? Email [email protected].