Privacy Policy

Last updated: 8 March 2026

1. Introduction

TheClubTrip ("we", "us", "our") operates the website at theclubtrip.com. This policy explains how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

We collect information you provide directly:

  • Account information: name, email address, and password (or Google account ID if using Google sign-in)
  • Profile information: phone number (optional)
  • Trip signup information: medical conditions, emergency (SAR) contact details, vehicle information, and dietary preferences
  • Communications: messages sent through the platform

We also collect automatically:

  • Basic analytics data through Vercel Analytics (page views, device type)
  • Performance data through Vercel Speed Insights

3. How We Use Your Information

  • To create and manage your account
  • To process trip signups and manage trip logistics
  • To send trip-related communications (confirmations, updates, car arrangements, SAR details)
  • To facilitate communication between trip leaders and participants
  • To improve the service

4. Information Sharing

We share your information only in these circumstances:

  • Club leaders and admins can see your signup details (name, email, phone, medical conditions, SAR contacts, vehicle info) for trips you sign up to
  • SAR contacts receive emergency contact information when trip leaders send SAR forms
  • Service providers: we use Resend for email delivery and Vercel for hosting

We do not sell your personal information to third parties.

5. Data Storage and Security

Your data is stored in a PostgreSQL database hosted by Prisma. Passwords are hashed using bcrypt. Authentication tokens are stored in secure, HTTP-only cookies. We use HTTPS for all data transmission.

6. Your Rights

You can:

  • Access your account information at any time
  • Update or correct your personal details
  • Cancel trip signups
  • Request deletion of your account and associated data by contacting us

7. Cookies

We use a single essential cookie (auth_token) to keep you signed in. This is a secure, HTTP-only cookie that expires after 7 days. We do not use tracking or advertising cookies.

8. Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes by posting a notice on the site.

9. Contact

If you have questions about this privacy policy, please contact us at our contact page.