Privacy statement

Draft. This privacy statement is a draft and has not yet been reviewed. It will be finalised before HeadingWhere.com goes live.

HeadingWhere.com helps you choose where to travel. We keep the data we process to what the site needs, and we never sell it.

Who we are

HeadingWhere.com is run by [company name], [address], registered with the Dutch Chamber of Commerce under number [registration number]. For privacy questions, email info@headingwhere.com.

What we process and why

Data	Purpose	Legal basis	Kept for
Technical request data (IP address, browser, requested page, time)	Delivering and securing the site, preventing abuse (rate limits)	Legitimate interest	Short-lived server and security logs
Error reports (page, browser, technical error details; no name or email)	Finding and fixing bugs	Legitimate interest	Up to 90 days
What you type into smart search, and how you refine it	Answering your question and improving search	Legitimate interest	Search sessions 90 days, then only daily counts without text
Your location, only when you choose "use my location" in Discover	Showing destinations near your starting point	Consent (your browser asks)	Not stored
Usage statistics and marketing measurement	Understanding how the site is used	Consent (via "Cookie settings")	See the cookie statement
Emails you send us	Answering you	Legitimate interest	As long as needed to handle your message

We do not have user accounts yet, and we do not ask for your name or email address to use the site.

Smart search and AI providers

Smart search turns your question into search filters with a language model. The text of your question is sent to one of these providers: Groq, Google (Gemini) or Cerebras. We do not send anything that identifies you with it. We keep search sessions for 90 days to see which questions the site cannot answer yet; after that only anonymous daily totals remain.

Third parties we use

• Hetzner Online (Germany): our servers.
• Cloudflare: delivery of the site, security, media storage, privacy-friendly visitor statistics, and the consent window and tag delivery (Cloudflare Zaraz).
• Sentry and Grafana Labs: error reports and technical monitoring.
• PostHog (EU cloud) and Google Analytics (via Cloudflare Zaraz): usage statistics, only after your consent.
• Groq, Google, Cerebras: interpreting smart-search questions (see above).
• OpenStreetMap: map tiles; your browser loads them directly from OpenStreetMap servers.
• YouTube: some pages show videos. A video only loads from youtube-nocookie.com after you click play.

Where a provider processes data outside the European Economic Area, we rely on the EU standard contractual clauses or an adequacy decision.

YouTube API Services

HeadingWhere.com uses YouTube API Services to show featured videos. By playing a video you also agree to the YouTube Terms of Service, and Google processes data under the Google Privacy Policy. You can revoke access to your data via the Google security settings.

Links to partners

Some links go to partners such as ticket and travel providers. We may earn a commission when you book there. Once you leave our site, the partner's own privacy statement applies.

Your rights

You can ask us to access, correct or delete your personal data, to restrict or object to processing, or to transfer it. Email info@headingwhere.com. You can withdraw consent at any time via "Cookie settings" at the bottom of every page. You may also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We will update this page when our processing changes. Last updated: see the date below.