Privacy

Privacy policy

Last updated 26 August 2026

The short version

You can plan a whole trip on Retreat48 without creating an account. We do not ask for your name or payment details, set advertising or analytics cookies, or sell or rent personal data. If you choose to join our optional email list, we store your email address and consent record so we can send the occasional update you asked for.

What you type into the planner

To build your trip you may give the planner a starting point, dates, how many of you are going, a budget and some preferences. This is used for one thing: working out your trip — journey times, flights and prices. It is sent to our server, and from there to the travel services listed below, to do that work. It is not linked to an account.

Using Retreat48 in ChatGPT

Retreat48 can also be used as a ChatGPT App. OpenAI handles your conversation under its own privacy terms. When ChatGPT calls Retreat48, we receive only the trip fields needed for that request, such as your departure airport or city, dates or flexible month, party size, budget and preferences. We do not ask ChatGPT for your full conversation, account credentials, contacts, payment details or precise device location, and we do not store the text of your prompt.

We use those fields to run Retreat48’s own recommendation and itinerary logic and, where needed, pass the minimum relevant route, date, hotel or destination fields to the travel services listed below. The recommendations returned in ChatGPT are provided by Retreat48; ChatGPT may present and help refine them conversationally.

If you tap “use my location”, your browser asks your permission first. Your coordinates are used to work out your start point and routes and are not added to an account profile.

Email updates

If you actively tick the consent box and sign up for email updates, we store your email address, whether you consented, the wording you agreed to, where the sign-up form appeared and your subscription status. This information is stored in Supabase and is used only to send the occasional travel idea or offer described beside the form.

Our legal basis for these emails is your consent. You can withdraw that consent at any time using the unsubscribe link in an email or by contacting hello@retreat48.com. We keep your subscription information while you remain subscribed. After you unsubscribe, we may retain the minimum record needed to honour your preference and avoid contacting you again, unless the law requires or permits a different period.

Pseudonymous usage statistics

We record simple, pseudonymous events about how the planner is used — for example that a planning session reached the results page, or that a trip in a given destination was viewed. Each browsing session is identified only by a random number that is generated fresh each visit, kept in your browser’s memory, and never written to a cookie. These events contain no name, email address or precise location and are used solely to understand which parts of Retreat48 work well. As described below, our hosting platform may separately process IP addresses in technical logs.

For the ChatGPT App we separately label the acquisition channel as chatgpt_app and may record that a search was made, a recommendation was displayed, a trip or hotel was opened, an itinerary was generated, or an external link was selected. The record contains the event, a random short-lived session identifier, broad market and limited trip or hotel identifiers; it does not contain your prompt or ChatGPT account identity. Retreat48 keeps these pseudonymous planner events for no longer than 13 months.

We also use Ahrefs Web Analytics for aggregated page views and interactions. Its standard tracker is cookie-free, discards raw IP addresses and does not create a persistent cross-site identifier. Ahrefs receives page URLs, referrers and general browser, device, language and city-level information to produce aggregate reports.

Hosting and server logs

Retreat48 is hosted by Vercel Inc. Like almost every website and API, the hosting platform keeps standard technical logs, which can include IP addresses, for security and reliability. These are used to operate and protect the service and are retained under the hosting configuration and Vercel’s applicable retention periods. Retreat48 does not deliberately add trip prompts or precise locations to those logs.

The services that help build your trip

A few specialist providers do the heavy lifting behind each plan. When they act on our instructions they receive only what is needed for the job: OpenAI provides the ChatGPT interface; Google Maps Platform turns a start point into routes and journey times; LiteAPI provides live hotel prices and licensed hotel photographs, which Retreat48 fetches through its own image service; Travelpayouts provides flight schedules and fares; Uber may provide an availability/product lookup for airport-transfer guidance when that integration is configured; CARTO serves the map tiles on website trip maps; Supabase stores the pseudonymous usage events and optional email subscriptions described above; and Ahrefs provides aggregated, cookie-free website analytics. Where your browser loads something directly from one of these networks — such as a map tile — that provider technically sees your IP address, as with any image loaded on any website.

Booking with our partners

Retreat48 does not take payment. When you choose to book, we hand you to the booking partner — for stays via Stay22, which shops your hotel across sites such as Booking.com and Expedia, and for flights via Aviasales. From that moment you are on their website and their privacy policy applies. Our links carry a referral tag so the partner knows the booking came from Retreat48 and can pay us a commission. There is more on this in how we earn.

Cookies

We set no advertising, tracking or analytics cookies. The site may store limited functional preferences, such as your home market, so it can show the appropriate currency and starting options.

Your rights

Under UK and EU data-protection law you may have rights over personal data, including access, correction, deletion, restriction, portability and objection. You can also withdraw marketing consent at any time. To make a request, email hello@retreat48.com. If you are in the UK you can also complain to the Information Commissioner’s Office; EU residents can contact their local supervisory authority.

Changes and contact

We will update this policy when the information Retreat48 collects or the services it uses change. Anything unclear: hello@retreat48.com.