Back to Roseo

Privacy policy

This page explains what Roseo (https://roseo.travel) does with information about you when you use the site.

Roseo is the data controller for the site. You can reach us at privacy@roseo.travel.

The short version

• You can use Roseo without an account. If you choose to create one to save your trips, you sign in with Google, Facebook or a sign-in link sent to your email address, and we keep only your name, email address, profile picture and the trips you save, until you delete them.
• We never ask for payment details, and we do not use tracking cookies or advertising pixels. Site statistics are collected without cookies and without storing your IP address.
• When you click a partner link (for example to Booking.com), we record an anonymous click so that a booking can be credited to Roseo. We never learn who booked.
• Your booking is made on the partner’s site, under the partner’s own privacy policy.
• If you post in Social, your post (text, photos, the name you choose) is public right away, and Roseo reads new posts every day; you can delete it at any time.

1. Site statistics

We measure how the site is used with Plausible Analytics, a privacy-first service hosted in the European Union. It records aggregated page views and clicks (for example on partner buttons, including the address of the external page opened), referring sites, approximate country, browser and device type. It does not set cookies, does not use persistent identifiers and does not store your IP address: the address is used only for an instant, together with a salt that changes every day, to count unique visitors, and is then discarded. This means we cannot identify you and cannot follow you across other websites.

Legal basis: our legitimate interest in understanding how the site is used (GDPR, Article 6(1)(f)).

With your consent only, we also use Microsoft Clarity to record how pages are used (scrolling, taps and clicks, never text you type), so we can see where a page is unclear. Clarity is provided by Microsoft Corporation and may process data in the USA. Legal basis: your consent (GDPR, Article 6(1)(a)), which you can withdraw at any time with “Anonymous recordings” at the bottom of every page.

2. Partner links and affiliate clicks

Roseo helps you book stays, experiences and transport on partner sites. When you click a partner button, the request passes through our server, which records: a random click identifier, the partner, the type of item (hotel, experience, transport), the Roseo title, location or page you were on, the language of the page, and any campaign parameters contained in the link you arrived with. We do not record your IP address, device identifiers or the details of the trip you are planning.

The click identifier is handed to the partner or its affiliate network so that, if you book, the booking can be credited to Roseo. The network later reports a commission linked to that identifier; it does not tell us who you are or what you booked beyond what is needed to calculate the commission.

Trip details you enter in the trip planner (dates, number of travellers, departure city) are used to pre-fill the partner’s page. They are included in the link that takes you to the partner and are processed there under the partner’s own privacy policy. Roseo does not store them, except in the anonymous, aggregated site statistics described in section 1, or in your account if you choose to save a trip (section 5).

Legal basis: our legitimate interest in operating and funding the service (Article 6(1)(f)).

3. AI itinerary refinement

If you use the “refine this plan” feature, the text you type, the number of nights and the names of the locations and restaurants in your current plan are sent through our server to Anthropic’s Claude API, which returns a reorganised plan. Nothing that identifies you is included: no account details, no location coordinates, no device data. We do not store your request or the answer. Anthropic processes this data on our behalf under its commercial terms, which prohibit using it to train models and limit how long it is retained.

Please do not type personal details into the request: they are not needed to reorganise a plan.

To prevent abuse, our server counts for up to 24 hours, in memory only, how many requests come from the same IP address, and above a certain number asks you to try again later. The address is not stored.

Legal basis: our legitimate interest in providing the feature you asked for (Article 6(1)(f)).

4. Your approximate location and camera

To suggest a departure city in the trip planner, we use the approximate location (city level) that our host, Vercel, derives from your IP address when a story page loads. We use it only to pick the nearest major city, which you can change at any time, and we do not store it. The departure city you end up choosing is used as described in section 2.

Legal basis: our legitimate interest in making the trip planner quicker to use (Article 6(1)(f)).

Shot mode uses your camera to help you frame a photo at a filming location. The image is created and saved on your device only; nothing is uploaded to Roseo.

5. Your account (optional)

You can use Roseo without an account. If you want to save your trips, you can create a free account by signing in with Google or Facebook. When you do, the provider shares with us, with your permission, your name, email address and profile picture, together with an identifier of your account with them. We never see your password, and we never post anything or access your contacts.

Alternatively, you can sign in with just your email address: we send you a one-time sign-in link, so there is no password. In that case we receive only your email address. The email is sent by our email provider, Brevo.

We keep: the details above, the date your account was created and when you last signed in, and the trips you choose to save (the story, dates, number of travellers, departure city and itinerary). Your saved trips are private: only you can see them, when you are signed in. Our database provider, Supabase, also records technical logs of sign-in events (such as time and IP address) for security.

We use this data to let you sign in and to show you your saved trips. The person who runs Roseo can also see, in a private panel, the list of accounts with name, email, sign-in method, sign-up and last sign-in dates and how many trips each has saved (not what they contain), to manage the service and understand how it is used. We do not use it for advertising, we do not share it with partners and we send you no emails other than the sign-in links you ask for.

Legal basis: providing the service you asked for (GDPR, Article 6(1)(b)); for the private list of accounts, our legitimate interest in running and improving the service (Article 6(1)(f)).

Google and Meta handle the sign-in on their side under their own privacy policies (Google, Meta).

Posts in Social

With your account you can post in Social. We store your post: the text, up to four photos, the story and, if you choose one, the place, the name you show (such as “Anna R.”) and the date, linked to your account. Before the photos are saved they are made smaller and their hidden data, such as the GPS position and the camera model, is removed.

Your post appears right away; the person who runs Roseo reads new posts every day. Once published, the text, photos, name, story, place and date can be seen by everyone on the site. A post that is not published, or is later removed, stays visible only to you, with the reason, for 90 days and is then deleted; its photos are deleted straight away. You can delete your posts at any time on the Social page, and they are deleted together with your account.

If you tap the heart under a post, we store your “like” linked to your account. Everyone sees only how many likes a post has, never who gave them. Tap the heart again to remove it.

You can also comment on a post. We store the comment (the text, the name you show and the date) linked to your account. It appears right away and everyone on the site can read it; the person who runs Roseo reads new comments every day and deletes those that break the rules. You can delete your comments at any time. Likes and comments are deleted together with the post or with your account.

Anyone can report a post. We keep the report (the post, the reason, any details and, if given, an email address to answer) for up to 12 months.

Legal basis: providing the service you asked for (Article 6(1)(b)); for reports, our legitimate interest in keeping the site safe and our obligations as a host of other people’s content (Article 6(1)(c) and (f)).

Deleting your account and your data

• To remove a single trip, open My trips and choose “Remove”.
• To delete everything, sign in, open My trips (roseo.travel/account) and choose “Delete my account”. Your account and all your saved trips are deleted immediately and permanently.
• If you can no longer sign in, write to privacy@roseo.travel from the email address of your account and we will delete it within 30 days.
• If you signed in with Facebook, you can also remove Roseo from your Facebook settings (Settings & privacy → Settings → Apps and websites). This stops Facebook from sharing your data with us, but it does not delete the account we hold: use one of the options above for that.

6. Hosting and security logs

The site runs on Vercel, and our database, including accounts and saved trips, runs on Supabase in the European Union (Ireland). Like any web host, Vercel processes the technical data of each request (IP address, requested page including any trip parameters in the address, browser type and time) in order to deliver the site and protect it from abuse. These logs are kept for a short period.

Maps are drawn with tiles from CARTO, based on OpenStreetMap data. When a map is displayed, your browser requests the map images directly from CARTO’s servers, which therefore receive your IP address and browser type, as with any image loaded from another site. Roseo does not send CARTO anything else.

On place pages and in the trip planner you can open a map of nearby hotels provided by Stay22 (Canada). The map loads only when you open it: from then on your browser connects to Stay22’s servers, which receive your IP address and browser type and may use their own cookies and a device identifier (a fingerprint of your browser) to attribute a booking. Roseo sends Stay22 nothing other than the position of the place or area, the page language and, in the trip planner, your dates and number of guests.

Legal basis: our legitimate interest in security and operation (Article 6(1)(f)) and, where applicable, our legal obligations.

7. If you contact us or send feedback

If you email us, we process your name, email address and the content of your message in order to answer you, and we keep the correspondence for as long as needed to handle the matter.

If you use the “Feedback” button, we store your message, the Roseo page you sent it from (without any trip details the address may contain), the language of the site, the date and, only if you enter it, your email address so that we can reply. We do not link the message to your account and we do not store your IP address: to prevent abuse, our server counts for a few minutes, in memory only, how many messages arrive from the same address. Please don’t include personal information the message doesn’t need. Messages are stored with our database provider, Supabase, in the EU, and only we can read them.

If you use the search box on the home page, we store what you type (up to 100 characters, and nothing that looks like an email address or a phone number), the language of the site, the first story found and the date, so that we can learn which stories people look for. The same applies to a story you ask us to add. We do not link searches to you or your account and we do not store your IP address.

Legal basis: our legitimate interest in improving the site and responding to enquiries and feedback (Article 6(1)(f)).

8. Who receives data

The providers above act on our instructions as processors, except Google and Meta, which handle sign-in as independent controllers under their own policies. The affiliate networks (Awin, CJ Affiliate) and the partners you are taken to (Booking.com, Omio (trains, buses and flights), GetYourGuide, Yesim (travel eSIM), Stay22, Welcome Pickups (airport transfers), Kiwitaxi (airport transfers), Localrent (car rental) and others we may add) become independent controllers once you are on their sites, and their own policies apply. We do not sell personal data and we do not show advertising.

9. Transfers outside the EU

Vercel and Anthropic are US companies, CARTO may serve map tiles from the United States, and Google and Meta may process sign-in data in the United States. Where personal data is transferred to the United States, the transfer is covered by the European Commission’s Standard Contractual Clauses included in the providers’ data protection terms and, where the provider is certified, by the EU–US Data Privacy Framework.

10. How long we keep data

• Site statistics: aggregated and free of personal data; kept indefinitely.
• Affiliate click records: free of personal data; kept for up to 24 months for commission reconciliation, then deleted or aggregated.
• Account and saved trips: until you delete them or your account.
• Sign-in security logs: up to 12 months.
• AI refinement requests: not stored by Roseo.
• Hosting logs: the short period set by Vercel.
• Email correspondence: for as long as needed to handle your request.
• Messages sent with the “Feedback” button: up to 24 months, then deleted.
• Searches and story requests from the home page: up to 24 months, then deleted.
• Posts in Social: until you delete them or your account; posts not published or removed: 90 days (their photos straight away); reports: up to 12 months.
• Comments in Social: until you delete them, the post or your account.

11. Your rights

Under the GDPR you can ask us to access, correct, delete or restrict the personal data we hold about you, object to processing based on legitimate interest, and receive your data in a portable format. If you have an account, you can see your saved trips and delete them, or delete the whole account, yourself on the My trips page. For anything else, write to privacy@roseo.travel. If you do not have an account, we most likely hold nothing that identifies you.

You also have the right to lodge a complaint with a supervisory authority: in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority of the country where you live.

12. Children

Roseo is not directed at children under 16, and you must be 16 or older to create an account. We do not knowingly collect children’s data.

13. Automated decisions

The itinerary suggestions you see are generated automatically, but they have no legal or similarly significant effect on you. There is no profiling.

14. Changes to this policy

We will update this page when the site changes, for example when we add features or partners. The date at the bottom tells you when it was last revised. See also our cookie policy, our terms of use and partner links.

Contact

Roseo. Email: privacy@roseo.travel

Last updated: 25 October 2026