FitTravel doesn't require an account. We don't sell your data. If you use the chat widget or submit a gym listing, we hold onto only what's needed to reply and provide the service. You can email hello@fittravel.fit to delete anything we have on you.
On this page
1. Who we are
FitTravel (fittravel.fit) is a free discovery platform that helps travelers find gyms with day passes, healthy food, and walking/biking trails. We're the "data controller" for information you share with us. Contact: hello@fittravel.fit.
2. What we collect
We're a static site with no user accounts, so we collect a small amount of data by design.
When you just browse
- Location — only if you tap "Use my location," and only in your browser to power the search. We never send it to our servers.
- Local storage — search history, cached city results, and chat transcripts stay in your browser (see §5).
- Standard server logs from our host (Netlify) — IP address, user-agent, timestamp — kept for security & abuse prevention. Auto-deleted per Netlify's retention policy.
When you chat with our assistant
- Your message text is sent to OpenAI to generate a reply.
- If you share an email address in the chat, we may send you one welcome email via Resend and store the address so we can respond.
- We keep the last ~12 turns of your conversation in your browser only, so we can answer follow-up questions.
When you submit or claim a gym
- Business info: gym name, address, phone, website, category, amenities, day-pass price, photos.
- Contact info: your name, email, role at the gym, and a verification phone number.
3. How we use it
- To reply to your chat questions and process gym listings/claims.
- To send transactional emails (welcome, listing approval, verification codes).
- To improve the site — aggregate, anonymized usage patterns only.
- To prevent abuse (rate-limiting bots, blocking spam).
We do not use your data for ads, sell it, or share it with any third party for marketing.
4. Who we share with
We use a small number of vetted service providers who process data on our behalf:
- Netlify — hosting & serverless functions. Their privacy policy.
- OpenAI — powers the chat assistant. Chat messages are sent to their API. API data usage.
- Resend — sends transactional emails. Their privacy policy.
- OpenStreetMap / Overpass — supplies gym & food location data. Your search queries go to these public APIs (with no identifying info attached).
We may disclose information if legally required (e.g. valid court order) — we've never received one.
5. Cookies & analytics
We use two categories of browser storage, both explained below.
Essential (always on)
Stored in your browser's sessionStorage, cleared when you close the tab. Never sent to our servers.
- Your current chat conversation.
- The unread-message badge on the chat widget.
- Whether the first-time chat "nudge" animation has already played.
- Your cookie-consent choice (so we don't re-prompt).
Analytics — anonymous by default
We use Google Analytics 4 to understand which pages help travelers most and which city guides get the most visits. By default, we run analytics in a cookieless mode using Google's Consent Mode — pageviews and events are counted anonymously, no advertising cookies are set, no persistent identifier follows you between visits, and your IP address is anonymized before it reaches Google.
On your first visit you'll see a small banner offering to enable personalized tracking. If you accept, we set a first-party cookie that lets us recognize you as a returning traveler (useful for measuring which cities people come back to research). If you dismiss the banner, analytics stay anonymous — nothing changes.
What we track either way: page views, referrer, device type, country, chat opens, form submissions, and clicks on Facebook / Get Directions links. We never use this data for advertising, and we don't share it with third parties beyond Google Analytics itself.
Do Not Track: if your browser sends a Do Not Track header, we skip analytics entirely — no pings, no cookies, no banner.
Clearing your browser storage removes all of the above and resets the consent prompt.
6. Your rights (GDPR / CCPA / UK)
Depending on where you live, you have the right to:
- Access the data we hold about you.
- Correct or delete that data.
- Object to processing.
- Request your data in a portable format.
- Withdraw consent at any time.
To exercise any of these, email hello@fittravel.fit. We reply within 30 days (usually within 48 hours).
7. Children's privacy
FitTravel is not directed at children under 13 (or 16 in the EU). We don't knowingly collect data from them. If you believe a child has submitted info, email us and we'll delete it.
8. Changes to this policy
If we make a material change, we'll update the "Last updated" date at the top and — if we have your email on file — send you a note. Continued use after changes means you accept the updated policy.
9. Contact us
Questions, requests, or complaints:
Email: hello@fittravel.fit
If we can't resolve your concern, EU/UK users can complain to their local data protection authority.