Your information, your choices.
This page describes the current early-access service. Updated 15 October 2026.
Public browsing
You can browse destinations and experiences without creating a member account. The hosting and sign-in services may process technical request and security information to operate the website.
Your member account
Email and password authentication is provided by Google Firebase Authentication. Firebase processes your email address, password and authentication information to create and secure your account, verify your email and support password recovery. Our server transmits authentication requests securely; we do not store your password in the website database or browser storage. The website receives your verified account identifier and email address. We store your profile role, membership status and terms-acceptance record. Sign-in email is used to match recipient-specific diary shares.
Plans, diaries and photographs
We store the experiences you save, trip details and budget estimates, diary text, learning reflections and uploaded photos so you can access them across devices. Personal records are private by default. Structured records and photos are held in the website’s hosted database and file storage.
Photos are resized and metadata is removed before storage. Original-resolution uploads are not retained. Keep your originals and avoid uploading sensitive documents. Entry and photo deletion remove the active records and stored image; operational backups or logs may have separate retention.
Sharing
We store the recipient email, selected text and photo permissions, expiry and download setting for each share. Only the selected email can use that share while it is valid. Revocation stops future access but cannot remove existing copies or prevent screenshots. Learning reflections remain private.
Your controls
You can edit and delete entries, delete photos, revoke sharing, download stored photos individually and export diary text and trip records. To request account deletion or ask about your information, email hello@oveloworld.com. We may need to verify account ownership.
Service providers and payments
The service uses Google Firebase Authentication and hosted website infrastructure with Cloudflare database/file storage. Secure, HttpOnly cookies maintain your sign-in session on this website. The refresh cookie is session-only. Google and the hosting providers may process technical security information to operate these services. No subscription payment details are collected in this release. Contact forms open your email app with a draft; they do not submit automatically.
Before paid launch
Detailed retention periods, storage allowances and the final paid-service privacy and subscription terms remain to be finalised. Early access is not intended as the only copy of important travel records.