← Home · Create account · Sign in

Privacy policy

Last updated: 27 October 2026

This page covers the Travel Problem Radar website and email digest, run by Bhawna. Questions or requests: pehchanthetraveller19@gmail.com.

What we store

When you sign up, we store one record for your address:

• your email address;
• whether it is confirmed, your plan (Free or Pro), and the categories you chose;
• the dates you signed up, were sent a confirmation, confirmed, were sent an “already subscribed” email, and asked for Pro;
• a random code that makes the links in your emails work;
• if you continue with Google: only the email address Google gives us, which it says it has verified. We don’t keep your Google account id, name, photo or any Google token;
• if you choose a password: a one-way hash of it (scrypt, with a random salt), never the password itself, and how many wrong passwords were tried in the last hour. Removing the password on the manage page deletes the hash;
• when you ask for a sign-in link: a one-way hash of that link’s code, when it was sent and when it expires (15 minutes later). It is cleared once you use the link.

We also count events, such as a sign-up, a sign-in email or an unsubscribe, with only the type, the time and the plan. These counts hold no address, so they stay after you leave. To limit automated sign-ups and password guessing, we keep a shortened, one-way hash of the connection’s IP address (never the address itself) and delete it within a few hours.

Cookies

When you confirm your address or sign in, we set one cookie, tpr_session, so the site knows it’s you. It holds your record’s id (a one-way hash of your address, not the address itself), an expiry date and a signature. It lasts until you close the browser or sign out, and 12 hours at most. If you continue with Google, a second cookie, tpr_oauth, holds random values that check the reply comes from the sign-in you started. If your address has no account yet, it then holds that address while you decide whether to create one. It lasts 10 minutes at most and is deleted when you sign in or create the account. We set no advertising or tracking cookies.

What we use it for

Only to send the digest you asked for, to let you sign in and manage or end it, and to count sign-ups and unsubscribes. We don’t sell it, share it for advertising, or add you to any other list.

Who handles it for us

• Vercel hosts the site and stores the records in a private store.
• Resend sends the emails and tells us when an address bounces or marks an email as spam.
• Google, only if you choose “Continue with Google”: it confirms who you are and tells us your email address.

Each keeps its own logs under its own policy. They may store and process data outside India, including in the United States, where the site’s server code runs.

How long we keep it

• An address not confirmed within 7 days is deleted.
• Unsubscribing deletes your record at once. So does a hard bounce, or marking a digest as spam.
• A Pro account is the exception: the emails stop, but the account stays so you keep the board, until you press Delete my account on the manage page.
• Otherwise we keep it while you are subscribed, or until you press Delete my account.

Your choices

Every email has a Manage link (change categories, ask for Pro, delete your account) and an Unsubscribe link. To see or delete what we hold about you, or to complain, email pehchanthetraveller19@gmail.com. We reply within the same day. Grievance contact: Bhawna, at the same address.

Changes

When this page changes, the date at the top changes. If a change affects how we use your data, we email subscribers before it applies.