Privacy policy

What travel-ink stores about you

• Your account: your email address and a hash of your password (never the password itself). If you sign in with Instagram, your Instagram account ID, name, profile picture link and the sign-in tokens Instagram issues instead.
• Your list: the artists you add and your notes on them. Locations you add or fix by hand are saved on the artist, for everyone who follows them, without your name.
• Running the service: the invite you signed up with, and daily counts of the Instagram lookups you start, to keep within usage limits.

Artists

For each artist added, travel-ink fetches their public Instagram profile (handle, name, bio and profile photo) through Meta's official API for public Business and Creator accounts, and works out the locations in their bio. Artists are shared between users, but travel-ink never shows who added an artist or how many people follow one. Other users can only find artists with a public Business or Creator account.

Importing from Instagram

• Data export: the file you upload is read to list the accounts you follow, then discarded. Only the artists you pick are saved.
• Instagram session: if you connect your Instagram session to import or search, it's kept in your browser tab's memory only. It's sent to travel-ink with each request that needs it, used for that request to ask Instagram, and never stored or logged. Closing or reloading the tab, or signing out, forgets it.

The browser extension

• It runs only on instagram.com, where it reads the address of the page to tell which profile you're on. It doesn't read the page itself, your messages, or your Instagram login or cookies, and it never contacts Instagram.
• On a profile, it asks travel-ink for the list of artists you've added (using your travel-ink sign-in) to show whether this one is on it. That request doesn't say which profile you're looking at.
• Only when you click Add does it send that profile's handle to travel-ink, to add the artist to your list.
• If you click Add while signed out, it remembers the handle and the tab it opened for you to sign in, in your browser's memory, for at most 30 minutes, so it can finish the add once you have. Closing the browser clears it.
• It has no analytics or ads, and doesn't load code from anywhere.

In your browser

travel-ink sets one cookie, to keep you signed in. Your browser's storage also keeps a few things for you: an import in progress, the bio queue's state and which tips you've dismissed. They stay on your device.

Services travel-ink uses

• Vercel hosts the website, and a managed PostgreSQL database stores the data above. Their logs (which include IP addresses) are kept for a limited time.
• Meta (Instagram) receives the handles travel-ink looks up, your sign-in if you use Instagram to sign in, and your session's requests if you import with it.
• Anthropic (Claude) reads artists' public bios to pick out their locations. Nothing about you is sent.
• Mapbox turns location names into map positions, and draws the map in your browser, which sends it your IP address like any map would.

travel-ink doesn't sell or rent your information, use it for ads, or share it for any other purpose.

Keeping and deleting your data

Your account and list are kept until you ask for them to be deleted. Deleting your account removes it and your list. Artists stay in travel-ink while someone else still follows them, since their information comes from their public profile.

Contact

To ask about your data, or to have it deleted, contact the person who invited you to travel-ink. If this policy changes, the date at the top changes with it.