Privacy Policy
Plan My Haul is a shopping planner for travelers. This page describes what the service actually does with data today. We update this page when our data practices change.
What we don't do
- No public user accounts or advertising profiles
- No advertising trackers or third-party analytics SDKs
- No sale of personal data or sharing for advertising
- No storing of your haul unless you explicitly create a share link
Your haul stays in your browser
The list you build lives in your browser's session storage and is deleted automatically within 24 hours or when you close the tab. Your full list is not sent to our servers while you plan. Searches, item changes, list reviews, and retailer-link clicks are not sent to an analytics collector.
Share links
When you tap Share, the product list (item IDs and quantities only — no personal details, no free text) is stored on our servers so the link can be opened by others. Share links are public to anyone who has the URL, are excluded from search engines, and are deleted automatically 180 days after creation. If you don't want a list stored, don't create a share link.
Service statistics without tracking identifiers
We keep daily totals of successful home, planner, guide, and shared-page requests and successful share-link creation to understand and improve this service. These statistics do not require an analytics opt-in prompt. We do not send separate analytics events from your browser or create analytics cookies, session IDs, or device fingerprints.
The statistics database stores only the calendar date in Korea Standard Time, a limited page/action category, the screen language in the requested page URL (or unknown for share creation), a suspected-bot classification and reason, and a combined request count. It does not store individual request histories, exact timestamps, IP addresses or IP hashes, raw user-agent strings, referrers, query strings, search text, product lists, share IDs, or contact details. Counts are not unique people and are not used for advertising or individual profiles.
These totals are stored in Cloudflare D1 for the current day and the preceding 89 calendar days, with older totals deleted daily. Only authorized operators can view them. We use request user-agent and available Cloudflare bot signals transiently to separate suspected automation; a request without bot signals is not proof of a human visitor. Network requests are still processed by our hosting provider to deliver and protect the service.
You can exclude this browser using Statistics preferences linked below the planner or at /en/privacy/statistics/. This saves a first-party exclusion cookie for 90 days, containing only the value 1, not a user identifier. Use default statistics removes it. Clearing cookies removes the preference. We also honor Global Privacy Control and Do Not Track request headers. The setting does not affect use of the planner; counts already combined cannot be linked to you for removal.
Transition on 8 September 2026: the previous optional client event collector was retired. New client code removes the old analytics session and choice from browser storage and preserves an unexpired refusal as a statistics-exclusion cookie. That migration occurs after the first page request, so it cannot exclude a request already received by the server. Previously collected opt-in event records are not mixed with the new statistics and expire within their original 90-day retention period.
Infrastructure
The service runs on Cloudflare (hosting, database, and network). Like any website, Cloudflare's infrastructure processes technical request data (such as IP addresses) to serve and protect the site; we do not persist raw technical request data in our product analytics.
Operator & contact
Plan My Haul is operated by Stepzu, an independent sole proprietor registered in the Republic of Korea. Questions about this policy: hello@stepzu.com. We'll update the date above whenever this page changes.