Privacy Policy

Welcome to OASI. ("we", "us", "our"). This Privacy Policy explains which personal data we collect when you use theoasi.com, why we collect it, and what your rights are. We keep it simple: we only collect what we need to make OASI. work for you.

1. Who we are

OASI. is a European travel guide at theoasi.com, run by Julia. We are responsible ("controller") for the personal data described in this policy. Questions? Email hello@theoasi.com.

2. What data we collect

Without an account

• Favorites, passport stamps, trips and your packing list are saved on your own device (in your browser's local storage). We cannot see them.
• Ratings and reactions on spots are stored in our database without your name or email.
• Shared trips and shared lists: when you create a share link, that trip or list is stored in our database so the link works. Anyone with the link can view it, so only add what you are happy to share.

With an account

• Account details: your email address, the display name and avatar you choose, and (if you set one) a password, which is stored encrypted by our login provider. We never see your password.
• Your saved content: favorites, notes on favorites, passport stamps and trips are linked to your account so you can see them on every device.
• Plan together: if you invite a friend to a trip, we store their email address to give them access to that trip.
• Newsletter: only if you opt in. You can unsubscribe at any time.

For everyone

• Usage data: only if you accept analytics cookies, Google Analytics collects data about how you use the site (pages visited, clicks on shop links, device type, approximate location). This helps us understand what people like.
• Emails you send us: if you contact us, we keep your message and email address to reply.

3. Why we use your data

• To run your account and show your favorites, stamps and trips (based on our agreement with you when you create an account).
• To make share links and "plan together" work (same basis).
• To send the newsletter (only with your consent).
• To measure and improve the website with analytics (only with your consent).
• To keep the website safe and working (our legitimate interest).

We never sell your personal data.

4. Affiliate links and sponsored content

Some links on OASI., for example in our shop, are affiliate links. If you buy something through them, we may earn a small commission at no extra cost to you. When you click such a link you go to the other company's website, and their privacy policy applies there. That company may use cookies to see that you came from OASI.

Some spots, products or blog posts are paid placements. These are always marked "Sponsored". We do not share your personal data with sponsors.

5. Cookies and local storage

• Necessary: to keep you logged in and remember your choices (like your cookie choice, favorites and packing list on your device). These cannot be turned off.
• Analytics: Google Analytics cookies, placed only after you accept them in our cookie banner.

You can change your choice at any time by clearing your browser's site data for theoasi.com; the cookie banner will then appear again.

6. Who we share data with

We only use services we need to run OASI.:

• Supabase (supabase.com): our database and login provider.
• Hostinger: our website hosting.
• Google Analytics: website statistics, only with your consent.
• Open-Meteo: weather forecasts in the trip planner. Only the destination is sent, no personal data.
• Google Maps: opens only when you click a map link.

Some of these companies may process data outside the EU. Where that happens, they use the safeguards required by the GDPR, such as the EU Standard Contractual Clauses.

7. How long we keep your data

• Account data: as long as you have an account. When you delete your account (you can do this yourself on your account page), we delete your account data.
• Shared trips and lists: until you ask us to remove them.
• Newsletter: until you unsubscribe.
• Analytics data: 14 months, the Google Analytics default.

8. Your rights

Under the GDPR you have the right to:

• see the personal data we have about you;
• correct it;
• have it deleted;
• receive it in a usable format;
• object to or limit how we use it;
• withdraw your consent at any time;
• file a complaint with your data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).

To use any of these rights, email hello@theoasi.com. We reply within one month.

9. Children

OASI. is not meant for children under 16. We do not knowingly collect their data.

10. Changes to this policy

We may update this policy when OASI. changes. The date at the top always shows the latest version. If a change is important, we will let account holders know.