Privacy
Last updated 9 August 2026.
This explains what Wayzel collects, why, who else sees it, and how to get it back or deleted. It is written to be read rather than to be defensible, so if something here is unclear, ask and I will fix the wording.
Who is responsible
Wayzel is run by Jesper Synnergren, a sole trader (enskild näringsidkare) registered in Sweden, who is the data controller under the GDPR.
Gaffelseglet 50, 136 56 Vega, Sweden
hello@wayzel.com
What is collected
| Data | Why | Legal basis |
|---|---|---|
| Email address and password | To create your account and let you sign back in. | Performance of a contract |
| Display name | So the people on your trip can tell who added what. | Performance of a contract |
| Trip content — places, dates, plans, notes, expenses, photos | It is the product. Visible to the people on that trip and nobody else. | Performance of a contract |
| Home currency preference | To show what an expense cost you, alongside the trip currency. | Performance of a contract |
| Search and sync counts | To stop one account exhausting the shared API budget. | Legitimate interest — keeping the service available |
| Payment records | To know which trips you have unlocked, and for accounting. | Contract, and legal obligation for tax records |
There is no advertising, no tracking pixels and no cookies at all — not for analytics, not from anyone else. Nothing is sold or shared for marketing. Fonts on this site are served from this domain rather than from Google, so visiting it does not disclose your IP address to anyone else.
Visits are counted using Cloudflare Web Analytics, which records the page, the referring site, and the rough type of device and country. It sets no cookies and does not build a profile or follow you between sites, so there is nothing here to consent to or opt out of. Cloudflare already serves every page of this site, so this adds no company that was not already handling the request.
Your trips are not used to train AI. Wayzel is built with the help of AI tools, but nothing you put into it — places, plans, expenses, photos, messages — is analysed, mined or used as training data by Wayzel or by anyone else.
Who processes it
These are the only companies that handle your data, and only to run the service:
- Supabase — database, accounts and file storage.
- Cloudflare — hosting for this site and the app, the domain's DNS, and the visit counts described above.
- Google Places — searching for a place sends your search text to Google. Your account is not identified to them.
- Ticketmaster — event listings, queried by city and date. No personal data is sent.
- open-meteo and frankfurter.app — weather and exchange rates, queried by location and date. No personal data.
- Mailjet — sends the confirmation and password-reset emails. It sees your address and nothing else.
- Stripe — payments. Card details are entered on Stripe's own page and never reach Wayzel; what comes back is the amount, the date and which trip it was for.
Your account and everything in your trips is stored in the EU (Stockholm, eu-north-1). Cloudflare, Google, Stripe and Ticketmaster are US companies, so the requests described above may be handled outside the EU; those transfers rely on the European Commission's standard contractual clauses, which each of them offers as part of their terms. Nothing about your account is sent in the search, event, weather or exchange-rate requests.
How long it is kept
Your account and trips are kept until you delete them. Delete your account and the trips you own, along with their places, plans, expenses and photos, are deleted with it. Trips owned by other people that you were a member of remain theirs, with your name removed.
Payment records are kept for as long as Swedish accounting law requires, which is longer than the account itself. Usage counters are pruned after 30 days.
Your rights
Under the GDPR you can ask to:
- See a copy of what is held about you
- Correct anything wrong
- Delete your account and its data
- Get your data in a portable format
- Object to or restrict a particular use
Email hello@wayzel.com and it will be done within a month. If you are unhappy with how it is handled you can complain to the Swedish authority, Integritetsskyddsmyndigheten (IMY).
Children
Wayzel is not aimed at children under 13, and accounts should not be created for them.
Changes
If this changes in a way that matters, the date at the top changes and anyone with an account is emailed. Cosmetic edits will not be announced.