Cityraze ("we", "us", "our") is a curated city-travel guide on the web and in the Cityraze app for iPhone and Android. Cityraze is owned and operated by Odinzone Labs LLC; the apps are published in the App Store and Google Play by WDS LLC on its behalf. This page explains what data we collect, why, who we share it with, and the choices you have. We keep it plain and short on purpose.
Who we are
Cityraze is owned and operated by Odinzone Labs LLC, which decides how your data is used (the "data controller"). WDS LLC publishes the Cityraze apps in the App Store and Google Play for Odinzone Labs LLC; the apps send your data to Cityraze, not to WDS LLC. For any privacy question or request, contact us at our contact page or by email at contact@cityraze.com.
What we collect
- Email address and name — when you sign up for our newsletter, create a trip in the itinerary planner, or create an account (a GoneGlobe ID: one sign-in for every GoneGlobe product, Cityraze included). You can sign in with a one-time code sent to your email, a password, Google, or Apple. If you choose Apple's "Hide My Email", we only receive Apple's relay address.
- Trip inputs — the city, dates, budget, and preferences you enter into the itinerary planner, and any names you add for travel companions.
- Concierge questions — the questions you type into our AI concierge.
- Ask chats — what you ask on ask.cityraze.com and its answers. Chats are kept so you can come back to them (if you're signed in) and so we can see what travelers ask and improve the answers. Without signing in, a chat isn't kept for you to reopen, but it is still stored on our side for that analysis.
- What Ask remembers — if you're signed in, Ask keeps a short list of lasting things you've told it about yourself (for example where you fly from or who you travel with), so you don't have to repeat them. It's stored with your Cityraze data, under your GoneGlobe ID (your Cityraze account). You can see, edit or delete each item, or switch memory off, at ask.cityraze.com/memory.
- Routes — the journeys you ask Route (in the app) or Passraze to plan, for example "Vilnius to Vienna". They are stored without your name or account, so they can be reopened by link and so we can improve the routes.
- In the app — signed in, the app uses the same GoneGlobe ID (your Cityraze account) as the website: your email, trips, taste answers, Ask chats and what Ask remembers. The app has no advertising, analytics or tracking SDKs, does not use your location, and does not read your contacts or photos. Your sign-in is kept in your phone's secure keychain (iPhone) or keystore (Android) and is removed when you sign out.
- Usage data — pages viewed, pins you show interest in, and clicks on booking links, tied to a random first-party session identifier (not your name). We use this to understand which destinations and places people find useful. We also measure visits in aggregate with Google Analytics (see below).
How we use it
- To build and show you your itinerary, and to let you share it by link.
- To send the newsletter you asked for (you can unsubscribe from any email).
- To answer your concierge questions and your questions on Ask.
- To plan the routes you ask for.
- To measure interest in cities and places so we can improve the guide.
We do not sell your personal data.
Cookies
We use a small number of first-party cookies, and no third-party advertising cookies:
- A session cookie (
cr_sid) — a random identifier used to measure usage and attribute booking-link clicks. It does not identify you personally. - A sign-in cookie — set only if you sign in, so you stay signed in. While you sign in, our sign-in provider's page (WorkOS) also sets its own essential cookies.
- A notice cookie — remembers that you have seen our cookie notice so we do not show it again.
The app itself does not use cookies. When it opens a booking or partner link, that page opens in your phone's browser, where that site's own cookies apply.
Because we only use essential, first-party cookies and no ad tracking, our cookie notice is an acknowledgement — there is nothing to opt in or out of. If you prefer, you can block or delete cookies in your browser settings; the site will still work, but usage measurement and staying signed in may be affected.
Who we share data with
We use a small set of trusted service providers to run Cityraze. They process data on our behalf:
- Cloudflare — website hosting, our application and database, delivery, and storage of images and logs.
- WorkOS — handles sign-in for your GoneGlobe ID. It stores only what signing in needs: your email address, name, and how you sign in (email code, password, Google or Apple). Your trips, preferences and companions stay with Cityraze. WorkOS stores this data in the United States.
- Sendy / Amazon SES — sending the newsletter you subscribe to.
- Google Analytics (via Cloudflare Zaraz) — measures visits to the site in aggregate. It runs on Cloudflare's servers, not in your browser: no Google scripts load on the page and no Google cookies are set. Google receives the pages you view, the referring site, your approximate location and your browser and device type, and may process this in the United States.
- Anthropic (Claude) — powers the AI concierge and itinerary generation, and drafts some of the place descriptions on the site. Your concierge questions, Ask chats (with what Ask remembers about you, if you're signed in) and trip inputs are sent to Anthropic to generate a response. They are not used to train models. Where you interact with AI (the concierge, the trip planner), we tell you so.
- Apple App Attest and Google Play Integrity — when you use Route in the app, the app asks Apple or Google to confirm that it is a genuine copy of the Cityraze app on a real device, so our route planner can't be abused by bots. We receive a yes/no answer, not personal data.
- Flight fares (LiteAPI) — when you look at fares for a flight in Route, we send only the two airports and the date to our travel-data provider.
- Booking and activity partners — when you click a booking link we redirect you to a partner site (for example GetYourGuide or a hotel provider). In the app, these links open in your phone's browser or in the partner's own app. Once you leave Cityraze, that partner's own privacy policy applies.
Affiliate disclosure
Some links on Cityraze — including "book" and activity links — are affiliate links. If you book through one of them, we may earn a commission at no extra cost to you. This never changes what we recommend: our pins are chosen by people, not by commission. Affiliate revenue helps keep the guide running.
Data retention
We keep your data only as long as needed for the purpose it was collected: newsletter data until you unsubscribe, itinerary and account data while your account is active, and usage data in aggregate to understand trends. You can ask us to delete your data at any time.
Your rights
Depending on where you live (including under the EU/UK GDPR), you have the right to access, correct, or delete your personal data, to object to or restrict certain processing, and to receive a copy of your data. To exercise any of these, email contact@cityraze.com and we will respond within a reasonable time. You can also delete your account yourself at any time from My trips → Delete account on the website, or Me → Delete Account in the app. You choose to delete only your Cityraze data (your trips, preferences, companions, Ask chats and what Ask remembers; your GoneGlobe ID stays) or your whole GoneGlobe ID (that data, plus your sign-in at WorkOS). See Delete your account.
Some of the providers above (including Cloudflare, WorkOS, Google and Anthropic) process data in the United States. Those transfers are covered by Standard Contractual Clauses or an equivalent safeguard.
Changes to this policy
If we change how we handle data, we will update this page and the "last updated" date above.