Privacy Policy

Last updated 26 June 2026

itinerary.live is operated by Audunn Olafsson, a sole proprietor based in Davis, California, United States. This policy explains what information the service handles and why. I try to collect as little as possible.

Information collected

• Account details. Your name and email address, and a password that is stored only in hashed form, never as plain text.
• Your content. The schedules, notes, and any cover image you add to your retreats.
• Guest email addresses. If you choose to email a guest link to a list, those addresses are stored only so the link can be sent and so unsubscribe requests can be honoured.
• Guest page signals. When a guest opens a link, a random identifier is stored in that guest's own browser so distinct opens can be counted. It is not linked to a name or identity. If a guest turns on reminders, their browser's notification subscription is stored so reminders can be delivered.
• Payment details. Subscriptions are processed by Stripe. We never see or store your card number. We keep a Stripe reference so the subscription can be managed.
• Basic logs. Standard server logs needed to run the service securely.

How it is used

To provide and maintain the service, to display your itineraries to the guests you share them with, to handle subscriptions and billing, to send the guest emails and reminders you request, and to keep the service secure.

Sharing

We do not sell your information or use it for advertising. It is shared only with the providers needed to run the service, as processors acting on our behalf: Stripe for payments and Resend for sending email. Information may also be disclosed if required by law.

Cookies

We use a single sign-in cookie to keep hosts logged in. There are no advertising or third-party tracking cookies.

Retention

Account and retreat data are kept while your account is active and removed when you delete your account. Some records, such as payment records held by Stripe, may be retained where required for legal or accounting reasons.

Security

Passwords are hashed, traffic is served over HTTPS, and access to data is limited to what is needed to operate the service. No method of storage or transmission is completely secure, but I take reasonable measures to protect your information.

Your choices

You can edit or delete your account at any time from your settings. Guests can unsubscribe using the link in any email, and can turn reminders off from the itinerary page. For any privacy request, email axel@plasma.is.

Children

The service is intended for adults running retreats and events, and is not directed to children.

Changes

This policy may be updated from time to time. Significant changes will be noted here with a new date.

Contact

Questions about privacy: axel@plasma.is.