Privacy Policy

🔒 Privacy-First Design

DB Wrapped is built with privacy as a core principle. We collect the minimum data needed to generate your travel summary and nothing more.

📊 What We Store

• Aggregated statistics only — Total trips, kilometers, train types, personality type
• No individual trip details — We don't store your specific routes, stations, or times permanently
• No email content — Emails are processed in memory and not saved
• No personal information — We don't store your name, email address, or booking references

⏱️ Data Expiration

• Your Wrapped — Automatically deleted after 90 days
• Gmail connection — Tokens deleted after 30 days of inactivity
• Uploaded files — Processed in memory, never stored

🔐 Gmail Integration

When you connect Gmail, we:

• Use read-only access — We can only read, not modify your emails
• Only search for Deutsche Bahn booking emails
• Process emails server-side — Your data never touches third-party servers
• Store an encrypted token — Using AES-256 encryption
• Never store email content — Only extracted trip data is used

📤 PDF Upload

When you upload PDFs, they are processed entirely in memory on our servers. Files are never written to disk or stored. The extracted trip data is used only to generate your Wrapped and then discarded.

🌍 Sharing

When you share your Wrapped, only the aggregated statistics are visible. No one can see your individual trips, routes, or booking details. Shared Wrapped links also expire after 90 days.

🗑️ Delete Your Data

Your data is automatically deleted after 90 days. If you want immediate deletion, contact us and we'll remove it within 24 hours.

📧 Contact

Questions about privacy? Open an issue on our GitHub repository.