Last Updated: February 15, 2026
TravelForFun (“TravelForFun”, “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains what personal data we collect, how we use it, how it is shared, how long we retain it, and what rights you have in relation to your personal data when you use the TravelForFun platform.
TravelForFun is an online platform designed for adults to connect with other adults for social experiences, accommodation sharing, cultural exchange, and related activities.
This Privacy Policy applies to the TravelForFun website, web application, and related services.
TravelForFun is currently provided free of charge. TravelForFun does not currently process payments, subscriptions, or other monetary transactions through the platform, and does not currently operate paid advertising. This Privacy Policy may be updated if paid features or additional processing activities are introduced.
TravelForFun is operated through the TravelForFun platform and acts as the data controller for the personal data described in this Privacy Policy.
TravelForFun is currently being operated from Spain.
For privacy-related questions or requests concerning your personal data, please contact us at: [email protected]
TravelForFun has not appointed a Data Protection Officer at this time. Privacy-related requests can be submitted to [email protected].
The personal data we process depends on how you use TravelForFun.
When you create or use an account, we may process:
Supported authentication methods currently include Google authentication, email magic links, and email and password authentication. We also provide email verification and password reset.
If you use Google to authenticate, some account information is provided to us by Google through the authentication process.
We do not receive or store your Google account password.
You may choose to create a public TravelForFun profile.
Depending on the information you choose to provide, your profile may contain:
Some of this information is optional.
You should only provide information that you are comfortable sharing with other TravelForFun members.
Information contained in your public profile is available to verified TravelForFun members.
This may include information concerning your preferences, interests, intentions and other information that you voluntarily include in your profile.
Your email address and other private account information are not part of your public profile.
Some information that you voluntarily provide through your profile may reveal information concerning your sexual orientation, sex life, gender identity, or other matters that may receive additional protection under applicable data protection law.
Examples include:
TravelForFun does not require you to provide this information in order to create a basic account.
Users choose whether to provide this information. Where provided, it may be visible to other verified TravelForFun members according to the platform's profile visibility rules.
Where information you choose to provide constitutes special-category personal data under applicable law, TravelForFun will process that information only where an appropriate legal basis and any additional condition required by applicable law, including an Article 9 GDPR condition where that law applies, are available.
A dedicated explicit-consent mechanism for special-category personal data is not currently implemented. The existing registration acknowledgement of the Terms and Conditions and this Privacy Policy is not, by itself, treated as explicit consent for special-category personal data.
You should not provide sensitive information about yourself or another person unless you are comfortable with the processing and disclosure described in this Privacy Policy.
TravelForFun allows users to upload images as part of profiles, publications and conversations.
We may process:
Only images are currently supported. Video uploads and document uploads are not currently supported.
Profile and publication images are automatically processed by a third-party image moderation service, Sightengine, for safety and content moderation purposes.
This processing may include detection or scoring relating to:
Moderation results may be stored together with the relevant image information in our systems.
Chat images are currently compressed but are not sent to Sightengine for automated moderation.
TravelForFun provides private messaging between users.
Messages may contain:
Messages are stored in our systems to provide the messaging functionality. Message previews may also be used for service-related email notifications.
Private conversations are not generally accessible to TravelForFun administrators through the normal application interface.
However, where a user submits a report concerning a conversation, TravelForFun may collect and review a limited snapshot of the reported conversation for safety and moderation purposes. Currently, this may include the most recent messages associated with the reported conversation.
Users should remember that information shared through private messages may be seen by the other participants in the conversation.
TravelForFun allows users to create host and traveler publications.
A publication may contain:
TravelForFun currently does not collect or process street addresses, GPS coordinates, accommodation pricing, house rules, capacity information, or identity documents as part of the publication system.
Accommodation-related applications may contain:
TravelForFun is currently provided free of charge. TravelForFun currently does not process payments, subscriptions, or other monetary transactions through the platform, and does not currently process bookings. TravelForFun does not currently use a payment processor. If paid features are introduced, this Privacy Policy will be updated as necessary.
TravelForFun provides reporting and moderation functionality to help maintain a safe platform.
When a user submits a report, we may process:
Reports are accessible only to authorized TravelForFun administrators and moderators.
Reports may be retained after an account is deleted where necessary for safety, fraud prevention, enforcement of our Terms and Conditions, or other legitimate purposes permitted by applicable law.
We use personal data for purposes including:
We may send transactional and service-related emails, including:
TravelForFun does not currently send marketing newsletters or promotional email campaigns, and does not currently operate paid advertising. If marketing or advertising activities are introduced, this Privacy Policy will be updated as necessary.
We may process personal data where necessary to:
Where GDPR or another applicable data protection law applies, we process personal data on one or more lawful bases provided by applicable law.
Depending on the particular processing activity, these may include:
For processing that requires consent, consent will be requested separately from acceptance of this Privacy Policy or the Terms and Conditions.
You may withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
The applicable legal basis depends on the processing activity. For special-category personal data, processing takes place only where an appropriate legal basis and an applicable additional condition under Article 9 GDPR or equivalent law are available. The registration acknowledgement of this Privacy Policy and the Terms and Conditions is not, by itself, treated as explicit consent for special-category personal data.
We use selected third-party service providers to operate TravelForFun.
TravelForFun uses Firebase services provided by Google, including:
These services support authentication, data storage, image storage, backend processing, security and abuse prevention.
If you choose Google authentication, Google provides authentication information to TravelForFun as part of the sign-in process.
We use Mailjet to send transactional emails.
Depending on the email, Mailjet may receive information such as:
Authentication emails may contain links containing temporary authentication or account-action information.
TravelForFun does not currently use Mailjet for marketing newsletters.
We use Sightengine to automatically moderate profile and publication images.
Relevant image files are transmitted to Sightengine for moderation and the resulting moderation information may be stored by TravelForFun.
Sentry may be used for error monitoring and application diagnostics when enabled in the relevant environment. Its production configuration is subject to the applicable deployment and privacy controls. Sentry is not currently enabled as an active production processor.
If Sentry is enabled in production, this Privacy Policy will be updated as necessary to describe the relevant processing.
Firebase Analytics functionality is integrated into the TravelForFun web application. Production analytics configuration is not currently finalized or enabled as an active production tracking programme.
Analytics and similar technologies may be introduced or enabled as the service evolves. Where applicable law requires consent before non-essential analytics technologies are used, TravelForFun will provide the applicable consent mechanism before such technologies are enabled.
The TravelForFun application currently does not use application-managed cookies for authentication or tracking.
The application may use browser storage technologies such as:
These mechanisms support core application functionality.
Third-party services and SDKs, such as Firebase Analytics or reCAPTCHA Enterprise, may use their own identifiers or storage mechanisms.
Where applicable law requires consent before non-essential cookies or similar tracking technologies are used, TravelForFun will obtain the required consent before activating those technologies.
Our cookie practices may be described in a separate Cookie Policy or cookie notice.
Firebase Analytics functionality is integrated into the TravelForFun web application.
Analytics collection may involve information such as:
The presence of Firebase Analytics in the application code does not mean that production Google Analytics tracking is currently active. Production analytics configuration is not currently finalized. Analytics and similar technologies may be introduced or enabled as the service evolves.
Where applicable law requires consent before non-essential analytics technologies are used, TravelForFun will provide the applicable consent mechanism before such technologies are enabled. TravelForFun does not currently provide a cookie-consent or analytics-consent interface.
TravelForFun does not currently use Google Tag Manager, Hotjar or similar advertising/behavioral tracking tools.
TravelForFun application code does not intentionally store users' IP addresses, browser user-agent strings, GPS coordinates, device fingerprints or precise geolocation information in TravelForFun user records.
However, infrastructure and third-party service providers may automatically process technical information such as IP addresses, device information or connection data when delivering their services.
This may include Google/Firebase infrastructure, hosting providers, security services, email providers, analytics services and other technical providers.
Such information may be processed in accordance with the respective provider's terms and privacy documentation.
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.
Retention periods depend on the type of data.
Account and profile information is generally retained while your account remains active.
When you delete your account, TravelForFun deletes the main account, profile, publication and associated application data as described below, subject to information that must or may be retained for legal, safety, security or fraud-prevention purposes.
Messages may be deleted or removed as part of account deletion, leaving conversations, private-image expiration mechanisms, or system message limits.
Some messages may remain temporarily in backups or technical systems.
Reports may be retained where necessary for safety, abuse prevention, enforcement, fraud prevention, legal claims, or protection of users and TravelForFun.
In particular, reports associated with an administrative ban may be retained.
Some information may remain in third-party systems such as email, logging, analytics, monitoring or infrastructure systems after deletion from TravelForFun's primary application databases.
The retention of such information is governed by the relevant provider's retention practices. TravelForFun does not currently publish fixed provider-specific retention periods.
Personal data is retained only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the service, maintain security, investigate reports and abuse, resolve disputes, enforce our Terms and Conditions, and comply with applicable legal obligations.
You can delete your TravelForFun account through the application.
When an account is deleted, TravelForFun currently deletes or removes, where applicable:
Information held by third-party providers, including email providers, analytics providers, monitoring systems, infrastructure providers or backups, may not be immediately deleted by the account deletion process.
Certain information may therefore remain for a limited period where required for technical, legal, security, fraud-prevention or other legitimate purposes.
Account deletion is processed through TravelForFun's systems and is subject to technical, legal and security limitations. TravelForFun does not guarantee that every copy of personal data is immediately and permanently removed from every system, including backups and third-party providers.
Depending on your location and applicable law, you may have rights including:
You can exercise your rights by contacting: [email protected]
We may need to verify your identity before processing certain requests.
Some rights are subject to legal exceptions and limitations.
If you are located in Spain, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD).
You may also have the right to contact the data protection supervisory authority in the EU/EEA country where you live, work, or believe that an infringement has occurred.
TravelForFun uses technical and organizational measures designed to protect personal data.
These include, where applicable:
No method of transmitting or storing information can be guaranteed to be completely secure.
You are responsible for keeping your account credentials confidential and for notifying us if you believe your account has been compromised.
TravelForFun uses service providers that may process personal data outside Spain or outside the European Economic Area (EEA).
These may include Google/Firebase, Mailjet, Sightengine and other infrastructure or service providers.
Where a transfer is subject to applicable data protection law, TravelForFun will rely on an applicable lawful transfer mechanism and appropriate safeguards.
TravelForFun is strictly intended for adults aged 18 or older.
We do not knowingly allow minors to create or maintain accounts on the platform.
If we become aware that a person under 18 has created an account, we may suspend or terminate the account and take appropriate steps to remove associated information.
If you believe that a minor is using TravelForFun, please report the account through the platform or contact: [email protected]
TravelForFun uses automated systems for certain operational and safety purposes, including automated image moderation and age-related signals derived from images.
For example, uploaded profile and publication images may be automatically analyzed for content such as nudity, violence and estimated facial age.
TravelForFun uses automated tools to assist with content moderation and safety. These tools are intended to support platform safety and moderation processes. They are not intended to make decisions producing legal effects or similarly significant effects on individuals.
Most personal data processed by TravelForFun is provided directly by you.
We may also receive certain information from authentication providers, such as Google, when you use their authentication services.
We may also generate information internally through:
We may update this Privacy Policy from time to time to reflect changes to:
When we make material changes, we may provide additional notice where required by applicable law.
Each version of this Privacy Policy will be identified by its effective or update date.
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact: [email protected]
For safety-related matters: [email protected]
For general support: [email protected]