Privacy Policy
Who we are
SendLoco is operated by Wassl OÜ, registry code 17343721, Sakala tn 7-2, 10141 Tallinn, Harju County, Estonia. Wassl OÜ is the data controller for the personal data described in this policy. For anything about your data, write to .
What we collect, why, and on what basis
Using the site. Page views, which links you click (including outbound booking links), device type and country, measured with cookieless analytics (see below). We use this to understand and improve SendLoco and to see whether it is used. Basis: our legitimate interest (Article 6(1)(f) GDPR).
Signing in. If you sign in with Google we receive your name, email address and profile picture from Google and set a session cookie. We use them to run your account, saved places and trips. Basis: providing the service you asked for (Article 6(1)(b)).
Things you create. Saved places, trips, creators you follow, and “Was it worth it?” votes. If you vote without an account, we store a salted one-way hash of your IP address and the place, never the IP address itself, so one visitor can’t vote twice on the same place. Basis: providing the service, and our legitimate interest in fair voting.
Email. If you give us your email to follow a creator or join the newsletter we use it for that, and every newsletter has an unsubscribe link. If you write to us we keep the correspondence to answer you. Basis: your consent for the newsletter (Article 6(1)(a)), which you can withdraw at any time; legitimate interest for replies.
Security and errors. Server logs, rate limiting by IP address and, where enabled, error reports that include technical details such as the page, browser type and approximate location. Basis: our legitimate interest in keeping the service secure and working.
What we don’t do
We don’t sell your data, we don’t run advertising, and we don’t track you across other websites. We don’t store your precise location; if you use the “Near me” feature we process it in memory only.
Cookies and analytics
SendLoco sets only the cookies it needs to work, such as keeping you signed in. Analytics run through Umami Cloud, which does not use cookies. It records page views and clicks and works out your country and device type from your request. It does not build a profile of you or follow you to other sites. You can object at any time by emailing us, or block it with a browser extension. Full details, including every item we store, are on the cookie policy.
Who we share data with
We use service providers who process data on our behalf: Vercel (hosting), Supabase (database), Umami Cloud (analytics), Travelpayouts (affiliate attribution), Resend (email delivery), Google (sign-in and business information about places) and Sentry (error monitoring, where enabled). When you open a map, your browser requests map tiles from OpenStreetMap. When you click an outbound link, for example to book a hotel, you go to that partner’s website and its own privacy policy applies. Some partners pay us a commission; see our affiliate disclosure.
Transfers outside the EEA
Some of these providers are based in, or process data in, the United States. Where personal data leaves the European Economic Area we rely on an adequacy decision, such as the EU-US Data Privacy Framework, or on the Standard Contractual Clauses the provider offers.
How long we keep data
Account data until you delete your account. Newsletter and follow emails until you unsubscribe. Guest vote hashes for as long as the vote exists. Server logs and error reports for a limited time. Correspondence for as long as needed to deal with your request and any follow-up.
Creators
SendLoco processes public information about content creators, such as names, public profile details, links to their channels and statements from their published videos, on the basis of legitimate interest: helping travellers find and verify publicly made recommendations, with every pick linked to its original source. Creators can access, correct or request removal of their data at any time via . Removal is honoured across the site and our content pipeline, so removed creators are not re-added automatically.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format, and you can withdraw consent at any time. Write to and we will respond within 30 days. You also have the right to lodge a complaint with a data protection supervisory authority. For SendLoco that is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), though you may also contact the authority in your own country.
Children
SendLoco is not aimed at children under 13 and we don’t knowingly collect their data. If you think a child has given us personal data, tell us and we will delete it.
Changes
If we make material changes to this policy, we’ll post a banner on the site and update the “last updated” date at the top of this page.