Privacy
What we hold, and why.
Next Stop takes no payment and has no advertising. The only personal information here is what an account needs to keep your trip, plus the two things that make prices yours: where you fly from, and which passports you hold.
Last updated 25 October 2026
Who we are
Next Stop is a sole operator based in New South Wales, Australia. You can reach us at hello@nextstoptravel.app about anything on this page, including a request to see or delete your data.
You can use most of this without an account
Browsing routes, reading city pages, changing the cities and nights, and pricing a trip all work without signing in, and none of it is recorded against you. An account is only needed to keep a trip (your dates, your home airport and your booking progress) so it follows you to another device.
What an account stores
First name
To address you. Optional.
Email address
To sign you in and to send a password reset. Never shown to anyone else, and we send no marketing.
Home airport
So a route's price includes your actual flights instead of leaving out its biggest number.
Passport countries
So the entry requirements we show are the ones that apply to you rather than a generic list. Optional: leave it blank and the visa line simply says less.
Your saved trips
The route, your start date, the nights you changed, and which bookings you've ticked off.
Nothing an account stores is shown to anyone else. Sharing a trip with other travellers is planned; if it arrives it will be off unless you turn it on, and this page will say exactly what it shows before it ships.
If you made an account before October 2026
Earlier versions also let you add a last name, an age, a short bio and a profile photo. We no longer ask for them and show them to no one, but anything you entered is still held until you delete it or your account. A photo you uploaded is stored at a public web address (anyone with the link can open it) until you remove it, which you can do from Your name on your profile.
Booking references you saved in an earlier version are stored only in your own browser or phone. They were never uploaded, so we cannot read them, and clearing your browser data deletes them.
Our own analytics
We measure how many people reach each page and how many click through to a supplier, using a service that sets no cookies, stores no identifiers and cannot follow you to other sites. There is no Google Analytics, no Meta pixel and no advertising script.
Who else touches your data
Supabase hosts the database and handles sign-in. Google handles sign-in if you use the Google button. When a page needs a live price we ask the supplier directly: Hostelworld for a bed, NSW TrainLink for a rail fare, Greyhound for a coach seat, Airalo or Holafly for an eSIM. Those requests carry dates, station codes and a country, never your name or email. Flight prices are not fetched at all: they are collected in advance and built into the page, so nothing leaves your browser for them. Exchange rates come from Frankfurter, and when you choose a password we check it against Have I Been Pwned using a method that sends only the first five characters of a hash, never the password.
When you follow a booking link you leave Next Stop entirely and the supplier's own privacy policy applies. We are not told whether you booked.
Some of those links are commission links. Where one is, the company at the other end sets its own cookie to know the visit came from us, and later tells us that a sale happened, never who made it. We do not pass them your name, your email or anything else about you, and we cannot connect one of their sales back to an account here.
How long we keep it
Your account and trips stay until you delete them. Ask us to delete your account and we remove your profile, your saved trips and your profile photo. There is nothing we keep afterwards.
Your choices
Email hello@nextstoptravel.app to get a copy of everything we hold about you, correct anything wrong, or delete your account. If you are in the UK or the EU you have the rights the GDPR gives you, including objecting to processing and asking for your data in a portable form; the same address handles those. If you are in Australia and unhappy with how we have handled a request, you can complain to the Office of the Australian Information Commissioner.
Under 18s
An account requires you to be 18 or older. We do not knowingly collect information from anyone younger; if you believe a child has created an account, email us and we will remove it.
Changes
If what we collect changes, this page changes with it and the date at the top moves.