Who we are
Next Stop is a sole operator based in New South Wales, Australia. You can reach us at hello@nextstoptravel.app about anything on this page, including a request to see or delete your data.
You can use most of this without an account
Browsing routes, reading city pages, changing the cities and nights, and pricing a trip all work without signing in, and none of it is recorded against you. An account is only needed to keep a trip — your dates, your home airport and your booking progress — so it follows you to another device.
What an account stores
First and last name
To address you, and to show a first name to other travellers if you ever turn that on.
First name only, and only if you opt in
Email address
To sign you in and to send a password reset. Never shown to anyone else, and we send no marketing.
Age
To confirm you meet the 18+ minimum for an account.
Home city and country
Context for your profile.
Shown to other travellers only if you opt in
Home airport
So a route's price includes your actual flights instead of leaving out its biggest number.
Passport countries
So the entry requirements we show are the ones that apply to you rather than a generic list. Optional — leave it blank and the visa line simply says less.
Short bio and a profile photo
Optional, and only worth filling in if you turn on sharing.
Shown to other travellers only if you opt in
Your saved trips
The route, your start date, the nights you changed, and which bookings you've ticked off.
Dates shown to other travellers only if you opt in
What stays on your device
Booking reference numbers and your day notes are stored only in your own browser or phone. They are never uploaded, so we cannot read them, and clearing your browser data deletes them.
Sharing with other travellers is off unless you turn it on
A saved trip can be made visible to other people travelling the same route. It is off by default. When you turn it on, those travellers can see your first name, your profile photo, your bio, your home city and the month you are travelling — never your surname, your email, your age, your passports or your exact dates. You can turn it off again at any time.
Profile photos are public while they exist
If you upload a profile photo it is stored at a public web address, which means anyone with the link can open it, whether or not sharing is on. Uploading a new one replaces the old one, and deleting your account deletes the file. If you would rather not have a photo on a public address, don't upload one — everything else works without it.
Our own analytics, and an advertising partner
We measure how many people reach each page and how many click through to a supplier, using a service that sets no cookies, stores no identifiers and cannot follow you to other sites. There is no Google Analytics and no Meta pixel of our own.
Every page also loads Drive, a monetisation script from Travelpayouts, served from emrld.ltd. It does three things. It turns travel links on the page into affiliate links, so a booking you make after following one may earn us a commission. It reads the content of the page you are looking at, in order to choose advertising it thinks is relevant. And it stores identifiers in your browser so it can recognise the device later.
The advertising it places is served through Google's ad network. That means Google receives a request from your browser and may set its own cookies and use identifiers it already holds about you, under Google's privacy policy rather than ours. Both Travelpayouts and Google are separate companies operating on their own terms, and the script can change what it does without us deploying anything.
If you would rather none of that ran, a content blocker will stop it, and every page on this site is built to work without it — the prices, the routes and the checklist are all rendered before it loads.
Who else touches your data
Supabase hosts the database and handles sign-in. Google handles sign-in if you use the Google button, and separately receives ad requests through the partner named above. When a page needs a live price we ask the supplier directly — Hostelworld for a bed, NSW TrainLink for a rail fare, Greyhound for a coach seat, Airalo or Holafly for an eSIM. Those requests carry dates, station codes and a country, never your name or email. Flight prices are not fetched at all: they are collected in advance and built into the page, so nothing leaves your browser for them. Exchange rates come from Frankfurter, and when you choose a password we check it against Have I Been Pwned using a method that sends only the first five characters of a hash, never the password.
When you follow a booking link you leave Next Stop entirely and the supplier's own privacy policy applies. We are not told whether you booked.
Some of those links are commission links. Where one is, the company at the other end sets its own cookie to know the visit came from us, and later tells us that a sale happened — never who made it. We do not pass them your name, your email or anything else about you, and we cannot connect one of their sales back to an account here.
How long we keep it
Your account and trips stay until you delete them. Ask us to delete your account and we remove your profile, your saved trips and your profile photo. There is nothing we keep afterwards.
Your choices
Email hello@nextstoptravel.app to get a copy of everything we hold about you, correct anything wrong, or delete your account. If you are in the UK or the EU you have the rights the GDPR gives you, including objecting to processing and asking for your data in a portable form; the same address handles those. If you are in Australia and unhappy with how we have handled a request, you can complain to the Office of the Australian Information Commissioner.
Under 18s
An account requires you to be 18 or older. We do not knowingly collect information from anyone younger; if you believe a child has created an account, email us and we will remove it.
Changes
If what we collect changes, this page changes with it and the date at the top moves.