Your travels,
on your terms.
Donde is an AS1 product for turning completed past trips into personal recaps. It has no people directory, contact-list access, messaging or public itinerary profiles.
Creating as a guest
Manual entries and local CSV files are processed in your browser. We do not upload your source file or automatically save your trip rows to an account. Your active draft normally lives in this tab's memory and is lost on refresh or closing the tab. Download a Trip CSV if you need a local backup.
When you choose Save from the website, we open the private app in a new tab and transfer the reviewed trip rows, optional recap name and selected year directly between those tabs. Trip data never appears in a link. The app temporarily keeps that draft in its own tab's session storage to preserve it through authentication. That copy expires after 24 hours and is cleared after sign-in, cancellation or clearing the draft. No source file is stored. Authentication itself stores session credentials in your browser.
Google Sheets
If you choose a Google Sheets import, your browser fetches the sheet you select. A published CSV link is fetched without cookies. The optional private-sheet flow uses Google's file picker and per-file permission, not access to all your spreadsheets. Google's permission permits managing selected files, but Donde only reads the spreadsheet you choose and never edits it. Its short-lived token stays in the import dialog's memory and is not sent to our servers or saved with your trips. Closing the import discards that token. There is no ongoing sync. Connecting a sheet does not create a Donde account or save trips; review and saving remain separate. Local CSV and manual entry remain available.
Designs, photos and recovery
Private editing and presentation are free and ad-free. Photos and messages stay in your browser until you explicitly save a private project. JPEG, PNG and WebP images are resized and re-encoded; original files and image metadata are not uploaded. Design & publish can carry your selected design, message and optimized photos through sign-in or checkout using temporary browser storage (IndexedDB), not a public link. Recovery expires after 24 hours; a recovered copy is removed when read, and expired stored copies are cleaned on the next recovery save. Clear site data in your browser to remove leftover local copies.
Saving a project stores its reviewed trips and design privately in Supabase and optimized images in private Netlify Blobs storage. Limits are 20 photos per project, 60 photos and 30 MB stored per account, and 1 MB per optimized photo. You can download stored photos and delete unused ones in the app. Photos referenced by an edition remain until that edition is deleted.
Saving to an account
Saving is optional and requires an account. After you confirm Save, reviewed destinations, arrival/departure dates and your optional recap name are stored privately in our Supabase database. Other accounts cannot read that history. We retain saved data while your account exists, unless you delete it or we communicate a change to the service. Download your data if you need an independent copy.
Supabase handles email/password or Google authentication, account identity and session management. Resend delivers account confirmation and password-reset emails from our dedicated Donde sender, processing the recipient address and authentication email content, not your itinerary, photos or personal recap message. Hosting and authentication providers process technical request information such as IP addresses and operational logs to provide the service. The active travel database is hosted in Ireland.
Downloads and sharing
Publish is a separate, explicit action after a visitor preview. Each edition has its own unlisted URL accessible to anyone who has it; it is not password-protected. The snapshot includes only the displayed name, selected years, city-level statistics and chapters, and any deliberately included Premium photos, greeting and message. It does not include raw trip rows, exact dates, private notes, account IDs or future trips. Only publish content you have the right to share, without other people's private information. Unpublish, undo or deletion immediately prevents new access to the edition and its photos; it cannot recall screenshots or copies already obtained.
A recap image includes your chosen display name, selected year, destination names and summary statistics, plus Donde and AS1 branding. It omits exact itinerary dates, raw rows and account identifiers. Check the image before sharing it through another service. A Trip CSV or account JSON export contains more detailed personal data; keep those files private.
Your controls
Clear draft removes the temporary draft from this tab. In My account you can export saved account data or permanently delete your account and associated records without paying. Public access is revoked immediately; physical photo and snapshot deletion has a one-hour grace period so in-flight uploads can finish, then enters the hourly cleanup worker. Failures can delay cleanup. Deletion includes retained records from the earlier Donde product. Provider security logs and backups can remain under their retention processes; deleting an account cannot recall downloads you shared elsewhere.
Payments
Stripe hosts checkout and processes payment details. We send an account reference and the selected credit pack, not your itinerary, photos or message. Donde stores the purchase reference, credit ledger and payment adjustment history; Stripe retains its own payment records. Five publishing credits cost USD 4.99, with no subscription. A successful new Premium edition costs one credit. The 30-minute undo returns a publishing credit, not a cash payment. See publishing details for limits and refund contact.
AS1 banners
Free recaps contain first-party promotions linking to AS1. The builder does not use third-party advertising scripts . Following a link takes you to a separate website with its own data practices.
Questions
Contact info@aisleseatone.com about your account or data. Include the email used for your account, and avoid sending itinerary files unless requested.