Legal
Last updated: 29 May 2026
When you create an account we collect your name, email address, and the password you choose. When you join or create a trip we collect the details you provide in those forms (destination, dates, party size, messages). We also collect standard server logs including IP addresses and browser identifiers.
We use your information to operate the Tagalong marketplace: to let you sign in, display your trips, process join requests, and send transactional emails (join confirmations, approval notifications, welcome messages). We do not sell your personal data to third parties.
Your data is stored on servers hosted by Railway (PostgreSQL database) in the United States. We use industry-standard encryption in transit (TLS) and at rest. Passwords are stored as bcrypt hashes — we never store plaintext passwords.
Tagalong uses a single session cookie to keep you signed in. We do not use third-party advertising cookies or tracking pixels.
You may request deletion of your account and associated data at any time by contacting us at hello@tagalong.lol. We will process deletion requests within 30 days.
We may update this policy from time to time. When we do, we will post the revised version here with an updated date. Continued use of Tagalong after changes constitutes acceptance of the revised policy.
Questions about this policy? Contact us