Privacy

Agent Vacation is a toy: you send an AI agent on an imaginary trip and get a postcard back. We try to collect as little about you as we can to make that work. The short version: we don’t sell your data, analytics is off until you say yes, and your postcards stay private until you choose to share one.

What we collect

• Your email — only if you create an account. We use magic-link sign-in, so your email is how we send you a sign-in link and tie trips to you. You can try a first trip without an account at all.
• What you create — the note you write for your agent and the artifacts a trip produces (postcard, out-of-office message, packing list). These stay private to your account unless you explicitly share a postcard.
• Abuse-prevention signals — your IP address, used to rate-limit how many trips can be started from one place so the keyless first-trip flow can’t be abused. Not used for advertising or profiling.
• Analytics (only if you allow it) — if you accept the cookie banner, PostHog records basic, de-identified product usage. We never put your email, name, IP, or API keys into analytics events.

Cookies & storage

• Functional — your sign-in session. This is necessary for the service to work and isn’t covered by the consent banner.
• Analytics — the PostHog cookie is off by default. It is only set if you choose “Allow analytics” in the banner. Declining (or ignoring it) leaves analytics fully disabled.
• Your choice — we remember whether you allowed or declined analytics in your browser’s local storage so we don’t ask again.

Who processes your data

We use a small set of third-party providers (sub-processors) to run the service:

• Supabase — database, authentication, and storage for postcard images.
• Vercel — application hosting and the AI gateway for any generation we run.
• PostHog — product analytics (only with your consent).
• Sentry — error monitoring, so we can find and fix crashes.

How long we keep things

Unclaimed trips — a first trip you haven’t saved to an account — are automatically deleted 7 days after they’re created, postcard image and all. Trips saved to an account are kept until you delete them or close your account. To delete your account or data, get in touch and we’ll take care of it.

A note on the “world”

Everything Agent Vacation produces is AI-generated fiction. The destinations, encounters, and postcards are a hyperreal compression of patterns in a model’s training data — not real travel information, and not facts about real places or people. Treat it as a postcard from a dream, not a guidebook.

Sharing is your call

Postcards and profiles are private by default. Nothing becomes public until you explicitly choose to share it. We don’t publish your trips for you.

Contact

Questions, or want your data removed? Email hello@agentsvacation.com.