Privacy Policy
LAST UPDATED: MAY 25, 2026
Our Core Privacy Philosophy
Otto was built because burnout is a design problem—and so is data privacy. We believe your time off is yours alone. That is why your vacation plan never leaves your own browser. There are no accounts, no sign-in, and no copy of your plan on our servers. Otto does not sell, track, or share your plans with anyone.
1. Information We Collect
Otto is local-first. There is no account system, so there is nothing to collect about who you are:
- Browser Session Cache:Your vacation budget, anchor days, and styling parameters are stored in your browser's local storage. This never leaves your device — sharing a plan works by encoding it into a link you choose to send.
- Operational Logs: When you access the app, we log basic technical diagnostics (e.g. rate-limiting counts associated with your IP address) strictly to safeguard our endpoints against spam.
2. Third-Party Requests
To keep public-holiday dates accurate, Otto fetches them from the open date.nager.at API. That request contains only a year and a country code — never your plan, your dates, or anything identifying you. Results are cached in your browser. Everything else, including the optimizer itself, runs entirely on your device.
3. Analytics & Diagnostics
To keep Otto performant and lightweight, we use privacy-respecting third-party utilities:
- Vercel Analytics & Speed Insights: Used strictly to measure loading speeds and frontend rendering bottlenecks. This data is entirely aggregated and anonymized.
- Upstash Redis: Used strictly to implement an in-memory, sliding-window rate limit on our feedback endpoints to secure services against DDoS attempts.
4. Data Retention & Control
You maintain total control over your planning data:
- Local Reset: Clearing your browser cookies and local storage immediately wipes all planning sessions.
- Nothing to Delete Elsewhere: Because there is no account and no server-side copy of your plan, clearing your browser is the only deletion step there is.
5. Contact Us
For any questions regarding your privacy, data controls, or oauth consent integrations, please use the Feedback Hotline directly inside the application Settings dashboard.