Privacy notice

Who operates OUTNXT

OUTNXT is an independently operated discovery, editorial and referral service run by an individual. For privacy enquiries, contact hello@outnxt.com. See contact information.

There are no public user or organiser accounts, public uploads, newsletter or OUTNXT checkout in the current service. We do not collect customer payment or passenger details.

Serving and protecting the site

Our hosting provider, Vercel, receives network information such as your IP address, user agent and requested URL. Request and application-error logs support delivery, security and fault diagnosis. Our legitimate interest is operating and protecting the service. Avoid putting sensitive information in search fields or URLs.

Site measurement

Under OUTNXT’s chosen configuration, Vercel Web Analytics measures public page usage regardless of your optional analytics choice, including before a choice and after No thanks. It receives page paths, referrer information, browser/device information and approximate location derived from requests. Vercel describes request-derived visitor differentiation lasting up to 24 hours; this is not a deletion period for all statistics. Our audit observed its script reading __va_attribution from localStorage; existing attribution or user information may be included in requests. OUTNXT does not manually create this value or enable Vercel identity, group or cookie features.

Global Privacy Control still blocks Vercel measurement. We permit only pageview events through this integration, remove query strings and fragments from analytics page URLs and exclude private/admin routes. We suppress events with query-bearing document referrers.

Optional analytics

With your consent, OUTNXT ProductAnalytics sends selected product-event names and controlled dimensions to its metrics endpoint: page family, canonical item reference where relevant, city, country, category, discovery source and landing page family. Supabase stores daily counts, not search text, item titles, full URLs, session IDs or account identifiers in those metric rows. A short-lived first-party browser value links the landing page family to a detail page and booking click. These limited counts are separate from ordinary request logs. ProductAnalytics is off until you choose Allow in the site banner or enable it in analytics settings, and stays off after No thanks. You can make that explicit OUTNXT choice when Do Not Track is enabled; Global Privacy Control still blocks optional analytics. Withdrawal stops further optional events without affecting access to the site or Vercel measurement.

Saved events and follows

Saved event references and followed venue/organiser names stay in your browser. We use them there to provide the functions you request and suggest related events. They are not uploaded as a saved-list profile. Clear them from Saved or your browser settings. They can be visible to another person using the same browser.

Booking links and referral records

Some links earn OUTNXT commission. When a stored booking link is used, our server records its canonical item and listing references, provider, city, item type, category, known commission classification, source category and timestamp. With optional analytics consent, it also records controlled page family, discovery source and landing family labels. These click rows deliberately exclude visitor identifiers, IP addresses, search text and user agents; hosting logs are separate. Our purpose is understanding referrals and maintaining booking links. Where associated operational data is personal, we rely on our legitimate interest in operating and measuring the referral service, subject to your right to object.

You book on the external provider’s website. That provider receives your visit and referral URL and handles its own booking, privacy and tracking arrangements. OUTNXT does not receive your booking form through this service.

Providers, listings and images

We request product information server-to-server from providers including Tiqets and Viator, using product references, destination, currency and language. We do not deliberately forward visitor IP addresses or customer details in those API requests. Our database provider is Supabase.

Listings come from public provider/organiser sources and editorial input. They may contain identifiable operator names, venue details or people in artwork. We use this information for discovery and maintaining accurate listings; our intended basis for relevant personal information is legitimate interests, subject to the circumstances and any required permission. Contact us to request correction or removal.

Images may load from public Supabase Storage or an external source/CDN. The image host receives your network request, including IP and browser information. This is separate from following a booking link; it does not mean every image is an advertising tracker. Google Maps is opened only when you follow its link.

Contact and administration

If you email us, your address and message are processed through our mailbox to respond and keep an appropriate record. Our legitimate interest is handling enquiries and disputes; a legal obligation may apply to particular records. Send only information needed for your enquiry.

Admin access uses a protected eight-hour authentication cookie. Private operational records include import URLs/errors and rep-account referral information, including aggregate sales/click totals. They support administration and provider relationships. Supabase Auth/profile infrastructure is not offered as a public account feature.

Retention and international processing

Local preferences remain until you remove them. Analytics choice storage remains until changed or cleared; withdrawing consent removes the local last-visit value. Provider previews are transient, and price-check messages clear after one minute.

Server records do not all have automatic deletion. Retention is assessed by the continuing purpose: operating and securing the service, resolving enquiries, correcting listings, maintaining referral records and meeting applicable legal obligations. Exact operational deletion schedules remain under review; no universal retention period is claimed.

Our hosting, database, email and image suppliers may process information outside the EEA. Processing locations and applicable transfer arrangements depend on the service and contract. Contact us for information about arrangements relevant to your data; we do not claim that every recipient or processing operation is EEA-only.

Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability, object to legitimate-interest processing, and withdraw consent without affecting prior lawful processing. We may need proportionate information to locate a record and verify a request. We do not add visitor identifiers to otherwise non-identifying counts just to identify you.

Contact hello@outnxt.com. You may complain to the Irish Data Protection Commission.