Last updated: 9 September 2026
Venster plans journeys in the Netherlands. It has no accounts, no advertising, and no tracking. We do not build a profile of you: nothing we store is tied to a stable identifier, so trips you plan cannot be linked together or back to you.
Your settings — time format, language, theme, rider preferences — and your saved places (with their names, icons and addresses) are stored only in your browser's localStorage, or the app's local storage. They are never sent to our servers. Your phone's own backup may include them, so they can reappear when you set up a new device; that is your device's backup, under your system settings, and we have no access to it.
To plan a trip we need the trip itself. When you search, these are sent to our server: the From and To you typed (or picked on the map), the departure or arrival time, and your route preferences. If you grant location permission, your coordinates are sent so we can sort nearby stops and show where you are on the walking map.
Location is used only while the app is open. There is no background location access, and your coordinates are not kept after your search is answered.
Our server forwards parts of a request to the services that actually answer it. These see the addresses or coordinates involved, but not who asked:
Our web server keeps standard access logs (IP address, time, which page or endpoint was requested) to keep the service up and to block abuse. The addresses and coordinates of your trip are stripped from those logs before they are written. Logs are deleted after 14 days and are not used to analyse behaviour.
Test builds — the versions we hand to testers before release, never the ones in the App Store or Google Play — additionally save a record of each journey search, so we can see what was planned and why when something goes wrong. That record contains the trip's start and end points and the routes we considered. It is not linked to your IP address or to any identifier, so the records cannot be tied to a person or to each other. If you are running a test build, the app tells you so in Settings. Records are kept for up to six months and then deleted.
If a place is missing or wrong, you can add it yourself. That correction stays on your device unless you tick the box to share it — only then are the name and address you entered sent to us, so we can improve the place database for everyone. Nothing else is attached.
Under the GDPR you may ask what personal data we hold about you, and ask us to correct or delete it. Because Venster has no accounts and stores nothing under a stable identifier, we usually cannot find data belonging to a particular person — which is by design. To delete everything on your side, clear the app's data or the site's browser storage; if your phone has backed the app up, remove that backup in your device's settings too.
Questions about this policy or your data: privacy@vnstr.nl.