Privacy Statement

Last updated: 18 July 2026

Funtler is a places-discovery service that helps you find things to do and save the ones you like. This statement explains what personal data we collect, why, the lawful basis for it, and how long we keep it, in line with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. Funtler is the Data Controller. For details of what we store on your device, see our Cookie Policy.

The short version

  • You can browse and search without an account, and without accepting personalisation.
  • An account is just an email, an optional display name, and a password. We never ask for your full name or your address.
  • If you sign in with Google, we also receive your first name and profile picture, and nothing else about you.
  • We use no advertising cookies, no third-party analytics, and no cross-site tracking.
  • Personalisation is opt-in and reversible, and you can delete your whole account yourself at any time.

What we collect and why

Your account

What it isYour email address, an optional display name, and your password (kept only as a secure one-way hash, never in readable form). Accounts created through Google have no password at all.
WhyTo create and secure your account, sign you in, let you recover access, and keep your saved places and preferences with you across devices.
Lawful basisPerformance of a contract (Article 6(1)(b)) — this is the information needed to provide the account you asked for.
How long we keep itUntil you delete your account. You can delete it yourself at any time from your profile, which erases it along with everything listed below.

Signing in with Google

What it isIf you choose to sign in with Google, Google tells us your email address, an identifier for your Google account, your first name, and a link to your Google profile picture. We do not receive your surname, and we do not ask Google for anything else — no contacts, no calendar, no Gmail.
WhyTo sign you in without a password, and to give your account a name and a picture so you are recognisable to yourself in the app and to other people beside any review you write.
Lawful basisPerformance of a contract (Article 6(1)(b)) — you chose Google as the way to sign in.
How long we keep itUntil you delete your account. Your first name is only ever used to fill a display name you have not set yourself, so you can replace it from your profile at any time; the picture is refreshed from Google each time you sign in.

Saved places and travel preferences

What it isThe places you favourite or mark as visited, the area you browse, and preferences such as how you like to travel, how far, and whether you travel with children.
WhyTo run the features you use — your saved lists — and to tailor which places we suggest to you.
Lawful basisPerformance of a contract (Article 6(1)(b)).
How long we keep itUntil you remove them or delete your account.

Personalisation activity

What it isA random identifier for your browser and a record of the places you were shown, how long you looked at each, which you opened, saved, marked as visited or hid, and the filters you chose. Linked to your account only if you sign in. We do not store your IP address or a browser fingerprint alongside these records.
WhyTo learn what kind of places you enjoy, so results and recommendations are ranked for you rather than for the average visitor.
Lawful basisConsent (Article 6(1)(a)). Nothing is collected unless you accept personalisation, and you can withdraw at any time — withdrawal stops collection and erases what we hold.
How long we keep itUntil you withdraw consent, ask us to erase it, or delete your account.

Reviews you write

What it isYour star rating, your review text, and the display name and profile picture on your account, which are shown publicly beside the review. If you signed in with Google and have not chosen a display name of your own, that name is your Google first name and the picture is your Google profile picture.
WhyTo show your review to other people looking at that place.
Lawful basisPerformance of a contract (Article 6(1)(b)) — you choose to post a review. Use a display name you are comfortable showing publicly.
How long we keep itUntil you delete the review or your account.

Approximate location from your IP address

What it isYour IP address, used for a moment when a page loads to estimate which county you are in.
WhyTo open the map near you on your first visit. The IP address is passed straight to the lookup and immediately discarded — we do not log it or store it.
Lawful basisLegitimate interests (Article 6(1)(f)) — showing you relevant nearby places. You can set your area manually instead.
How long we keep itNot retained.

Email verification and password resets

What it isYour email address and a short-lived one-time code.
WhyTo confirm your email address when you register and to let you reset a forgotten password.
Lawful basisPerformance of a contract (Article 6(1)(b)).
How long we keep itCodes expire within minutes and are deleted once used or expired.

Who we share it with

We do not sell your personal data and we do not share it for anyone else's marketing. We rely on a small number of service providers who process data on our behalf, under contract:

ProviderWhat they do
RenderHosts the website and its database.
ResendSends verification and password-reset emails; receives your email address for that purpose.
Cloudflare R2Stores images, including any profile picture you upload.
OpenStreetMapProvides the map tiles. Loading a map sends a request (including your IP address) to OpenStreetMap, which they may log.
GoogleProvides place information and some place photos, and — if you use it — sign-in. Loading a Google-hosted image, including your own profile picture, sends a request to Google, which they may log.

We also use AI services to understand search queries and to describe and organise places. These receive the text of searches and place information; they do not receive your account details or your personalisation history.

Your rights

Under the GDPR you have the right to access the personal data we hold about you, to correct it, to have it erased, to restrict or object to processing, to data portability, and to withdraw consent. In practice:

  • You can edit your display name and manage your saved places from your profile at any time.
  • You can accept or withdraw personalisation, and erase your personalisation history, from the cookie banner or the Cookie Policy.
  • You can delete your entire account, and everything tied to it, from your profile.
  • For anything else — a copy of your data, or a question — email us and we will respond promptly.

Changes to this statement

We may update this statement from time to time. Any change is reflected in the "Last updated" date above, so it is worth checking back occasionally.

Contact and complaints

If you have any question or concern about how we handle your personal data, please contact us first so we can help.

Email: [email protected]

You also have the right to lodge a complaint with the Irish Data Protection Commission, or with the supervisory authority in your country of residence:

Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland. Telephone: +353 (0)1 765 0100. Website: dataprotection.ie. Email: [email protected].

Definitions

Data Controller
The organisation that decides why and how personal data is processed. Funtler is the Data Controller for the data described here.
Data Processor
A company that processes personal data on our behalf and under our instructions, such as our hosting or email provider.
Processing
Anything done with personal data — collecting, storing, using, sharing, or erasing it.