Privacy Policy.

What we collect

TodoWeekend is read-only for most visitors. You can browse the map, event pages, editor's picks, and category lists without any data being collected beyond standard web-server logs (your request URL, timestamp, user-agent, and IP address rotating through Vercel's infrastructure).

We only collect personal data in two places:

• Newsletter signups. When you enter an email address and submit the newsletter form, we store: your email, the time of signup, your user-agent, and a short hash of your IP (not the raw IP). The hash is used to detect abuse only.
• Plan builder.When you describe what you want in the plan builder form, your prompt is sent to Anthropic's Claude API to generate a plan. We don't store the prompt or the generated plan on our side.

We do not use cookies for tracking. We do not run advertising.

Why we collect it

The newsletter list exists to send you one email per week with our editor's picks. That's the entire purpose. We don't sell, rent, or share the list with anyone else, ever.

Plan builder prompts are sent to Anthropic because Claude generates the itineraries. Anthropic's privacy policy covers what they do with the data. By default, Anthropic does not train models on API traffic.

Who we share it with

We use a small set of infrastructure providers to run the site. Your data is technically processed by them when you use the site:

• Vercel (hosting) — request logs, may include your IP address transiently. Privacy policy.
• Supabase (database) — stores newsletter signups and the event catalog. Privacy policy.
• Anthropic (plan builder) — receives your plan prompt to generate the itinerary. Privacy policy.
• Cloudflare (DNS, CDN) — routes traffic to our servers. Privacy policy.

Your rights under GDPR

If you're in the EU (including Spain, where we operate), you have the right to:

• Access the personal data we hold about you.
• Ask us to correct or delete it.
• Withdraw consent (one-click unsubscribe on every newsletter email).
• Port your data to another service.
• Lodge a complaint with the Spanish data protection authority (AEPD).

To exercise any of these, email hello@todoweekend.com. We respond within 7 days.

How long we keep it

Newsletter emails are kept until you unsubscribe. After unsubscribe, your email is deleted from our active database within 30 days. Abuse-hash IPs are purged every 90 days. Server access logs are rotated by Vercel on their own schedule.

Changes to this policy

If we change anything material, we'll note it at the top of this page with a new “last updated” date. For significant changes that affect subscribers, we'll also announce it in the newsletter before the change takes effect.

Contact

Privacy questions, deletion requests, anything else: hello@todoweekend.com.