Privacy statement

What data

• Signing in with Google: your name, email address and profile picture. Your profile picture appears in the link preview of invites to trips you created. The app asks nothing else from your Google account. You can change your name on your profile page.
• Signing in with a link by email: your email address, and your name if you fill it in on your profile page. If you later sign in with Google using the same address, it's the same account.
• Your home, if you set it: your town and coordinates rounded to about a kilometre, with the drive times to the regions. If you plan a trip 'from home', that trip's team sees that point as the starting point on the map. You can change or remove it any time on your profile page (tap your avatar).
• What you enter yourself: trips, where you stay, team members with their certifications, gear and notes, photos and avatars of your AI instructor, and your questions to the AI instructor with its answers.
• Joining through an invite link without an account: your name and certifications. A cookie remembers that you have access to that trip.
• Invitations by email: a trip's organizer can enter your email address to send you a personal link. Only that trip's organizers see the address. The email goes through Resend. The link signs you in with that address and creates an account if needed, with your name from the team; it works until 30 days after the trip and the organizer can withdraw it. If you sign in with another address, you can add it to your account on your profile page and merge two accounts. You can always have yourself removed from the trip through the organizer or the contact form.
• Asking to come along (‘I want to come too’ on a trip's read-only page): your name, email address, your message if you write one, and your account. If you're not signed in, we send an email with a confirmation link through Resend; only when you click it does your request go to the organizer. That click signs you in and creates an account on that address if you don't have one yet (with the name from the form). If you don't confirm within 24 hours, the request lapses and nothing goes to the organizer. The trip's organizers get an email through Resend and see your request with your address in their trip; nobody else does. If they add you, you join the team with your account and get an email about it; if they decline, you're not told and your account simply stays. You can have your account and your requests deleted through the contact form.
• Accommodation photo: if the organizer enters a link to the accommodation, our server fetches that page's preview image once (like a chat app does for a shared link) and we keep our own copy; a photo the organizer uploads is kept the same way. Only the trip's team sees it, and your browser doesn't connect to the booking site for it. It can be removed on the trip page and goes with the trip.
• Following sites: which sites you follow, your email address and the language of the weekly summary. If you're in a trip's team with an account, you automatically follow all of that trip's sites until the trip is over; for this we use your place in the team and the sites on the list, nothing else. You only get an email when something has changed. Unsubscribe with one click at the bottom of every email or on your profile page, and per trip: with the switch on the trip page or the link under that trip in the email. If you follow as a guest (through an invite link), the sign-in link creates an account and your place in the trip moves to it.
• Reporting the visibility on a cave page: the cave, the date of your dive, the visibility you pick and your account. We use it for the current conditions on the cave page and for the AI instructor. Only the number of reports, the average and the latest date are public, never your name. If you delete your account, your reports go with it.
• Reporting the water temperature on a cave page: the cave, the date of your dive, the temperature you enter and your account. We use it for the current conditions on the cave page, the cave block and the AI instructor. Only the number of reports, the temperatures and the latest date are public, never your name. If you delete your account, your reports go with it.
• A trip's plan: the caves on the list, the days, votes (👍) and who has dived a cave are only visible to the team. If someone in the team switches on the read-only link, anyone with that link can see the title, dates and caves per day, without names; switching it off stops the link at once.
• The contact form and messages about a cave or region: your message, the topic and, if you fill them in, your name and email address. We only use your address to reply to you, and only the administrators see it. If you are signed in, we take the address of your account.
• Signing up on the page for partners (dive centre, independent instructor, fill station or dive operator): the type, the name you work under, your name as contact person if you give it, your website, business e-mail address, regions, services, training levels and agencies, the link to your entry at your agency, the caves where you guide dives and your comment. We use them to review your sign-up and, if we approve it and you gave your consent, to show your listing; we never show your e-mail address. When your listing is live, we send you one email about it. Against spam we keep a one-way code of your IP address (not the address itself), which we erase after 24 hours. We keep your sign-up as long as your listing is on the site, and a rejected sign-up for at most a year. You can have your sign-up or listing removed at any time through the contact form or the contact address below.
• If you choose the partner card when signing up, we also keep the link to your logo (we put a copy of the logo on our own server), your business phone or WhatsApp number, booking link, languages, opening hours, your word as the owner and the page on your site with the link to DiveTripPlanner. Logo, phone, word, booking link, languages and opening hours are shown on your card. To check the link, we fetch only that one page of your own site at approval and then once a month; we only keep whether the link was there, what we found and when we looked.

What for

Only to make the app work: storing trips and teams, filtering caves by certification and gear, showing drive times and weather, and letting the AI instructor help plan. We also count anonymously how the site is used (see Visitor statistics). No ads, no selling of data and no tracking.

Who processes data

• Vercel: hosting, storage of uploaded photos and the anonymous visitor statistics.
• Neon: the database.
• Google: sign-in.
• Anthropic, via Vercel AI Gateway: the AI instructor's answers. The trip details, the team and your question are sent along for that.
• OpenStreetMap (Nominatim and map tiles), OSRM and Open-Meteo: address search, the map, drive times and weather. Search, drive times and weather go through our server and only receive the search term or coordinates; your browser loads the map tiles directly.
• Resend: sending sign-in links and forwarding messages from the contact form by email.
• YouTube (Google), Instagram and Facebook (Meta): only when you load a video or post on a cave page, see below.

Videos and posts on the cave pages

The cave pages show videos from YouTube and posts from Instagram and Facebook. They only load when you click them; until then your browser does not connect to those services (we fetch YouTube's preview images through our own server). After a click your browser loads the player or post directly, and Google's or Meta's privacy rules apply; they may set cookies. If you tick ‘load right away’, Instagram and Facebook posts load straight away on every cave page; your browser keeps that choice itself (local storage, not with us) and you can untick it there again. Videos play through youtube-nocookie.com. We find the videos automatically with the YouTube API Services; none of your data is sent along.

YouTube Terms of Service ↗Google Privacy Policy ↗

News on the cave pages

We look up news articles that mention a cave automatically every day, in the GDELT Project's open news data. That happens from our server; none of your data is sent along. We only show the headline, the news site and the date, without images. If you click a headline, you open that newspaper's or news site's own page, and their privacy rules apply.

GDELT Project ↗

Regions near you

Under Caves we order the regions by distance from your estimated location by default, also when you're signed in; if you're not signed in, we do the same on the front page. On a region's page, its caves are ordered by distance in the same way. Our host Vercel derives that location, roughly at city level, from your IP address on each visit. We only use it for that order, don't store it and set no cookie for it. Search engines get the usual order. If you choose your exact location under Caves, your browser asks for permission first; the order is then worked out in your browser and that location is not sent to our server.

Affiliate links

The links to Booking.com with the base villages on the region pages and in the ‘No place to stay yet?’ block on the trip pages are affiliate links. They go through divetripplanner.com/go/ to the partner's search page, sometimes via an affiliate network. We set no cookies for this and send nothing about you or your team: only the search itself (place, number of people and dates) and whether the click came from a region page or a trip. After your click, Booking.com or the network may set cookies to credit a booking to us; their privacy rules apply. If you book, we earn a small commission and you pay the same. Which villages we suggest depends only on where they lie relative to the caves, not on commission.

Visitor statistics

We use Vercel Web Analytics to see how many people visit which pages and how they find the site. It works without cookies and without storing your IP address: a visit is only recognised by an anonymous code that expires after 24 hours. For each page view it records the page address, the referring site, country, region and city, and the kind of device, operating system and browser. We remove invite codes and trip numbers from the address first. We only see totals, not who you are.

Cookies

We only use functional cookies: your sign-in session, guest access to trips, your language, a filter choice and whether posts may load right away (in your browser). No tracking or advertising cookies; the visitor statistics work without cookies. If you load a video or post on a cave page, YouTube or Meta may set their own cookies. If you click a link to Booking.com, they or their affiliate network may set their own cookies.

Keeping and deleting

Data is kept as long as your trip exists. You can delete trips yourself. To have your account or other data deleted, or to see what is stored about you, let us know through the contact form. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).