Privacy Policy

Welcome to OASI. ("we", "us", "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use and protect your personal data when you use theoasi.com.

1. Who we are

OASI. is a Europe travel guide operating at theoasi.com. For questions about this policy, you can contact us at hello@theoasi.com.

2. What data we collect

We collect the following data:

• Email address — if you subscribe to our newsletter via the OASI. Insiders sign-up form
• Usage data — if you have accepted analytics cookies, we collect anonymised data about how you use our website (pages visited, time spent, device type) via Google Analytics
• Trip data — if you use the Trip Planner and share a trip, that trip is stored in our database. This data contains no personal information unless you add it yourself
• Ratings & reactions — if you rate or react to a hotspot, this is stored anonymously in our database
• Favorites — saved spots are stored locally on your own device (localStorage) and are never sent to our servers

3. How we use your data

• Email addresses are used solely to send our newsletter. We will never share or sell your email to third parties.
• Analytics data is used to understand how our website is used and to improve the experience.
• Trip data is used to generate a shareable link. We do not access or use this data for any other purpose.

4. Cookies

We use the following cookies:

• Functional cookies — necessary for the website to work (e.g. remembering your password session). These cannot be turned off.
• Analytics cookies — Google Analytics cookies to measure website traffic. These are only placed after you give consent via our cookie banner.

You can manage your cookie preferences at any time via the cookie banner at the bottom of our website.

5. Third-party services

We use the following third-party services which may process your data:

• Supabase — our database provider (supabase.com). Data is stored on servers in the EU.
• Google Analytics — website analytics (only with your consent)
• Spotify — embedded music player. Spotify may set cookies. See Spotify's privacy policy.
• Google Maps — location links. No data is shared unless you click a Maps link.
• Hostinger — our website hosting provider

6. Your rights (GDPR)

If you are based in the EU/EEA, you have the following rights:

• Right to access your personal data
• Right to correct inaccurate data
• Right to erasure ("right to be forgotten")
• Right to withdraw consent at any time
• Right to lodge a complaint with your national data protection authority

To exercise these rights, contact us at hello@theoasi.com.

7. Data retention

We retain your email address until you unsubscribe from our newsletter. Shared trip data is retained for 90 days after creation. Analytics data is retained for 14 months as per Google Analytics default settings.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify newsletter subscribers of significant changes. The date at the top of this page always reflects the most recent version.