Privacy
Your privacy
The short version: we keep the details you type into a taxi booking or a saved trip plan, we use them for that ride or that plan, Stripe handles your card, and we do not track you around the site.
Last updated 1 October 2026.
Who is responsible
Lapland Story, Rovaniemi, Finland, is the controller of the personal data described here. For anything about your data, email info.laplandstory@gmail.com.
What we collect, and why
A taxi booking request. When you ask us for a ride, we receive the pickup and destination addresses, the date and time, the number of people, your name and phone number, and, if you give them, your email address and a note such as a flight number. We use these to confirm the ride, to meet you and to keep the records a business must keep. The legal basis is the service you asked for. The request is stored in our booking database, run for us by Supabase on servers in Stockholm.
A saved trip plan. When you save a plan on the itinerary page, the plan is stored in the same database so that its link keeps working, together with your email address if you typed one in. Anyone who has the link can open the plan.
Nothing else. There are no accounts, no newsletter and no contact forms. We do not use analytics or advertising trackers. The few cookies and bits of browser storage in use are listed under Cookies below. We do not sell or share your details with anyone for marketing.
Card payments. When you pay for a ride, the card form belongs to Stripe Payments Europe. Your card number goes to Stripe, never to us; we see only the last four digits, the amount and whether the hold, the charge or a refund went through. Stripe keeps what payment law requires under its own privacy policy, and sends you the receipt.
Services your browser talks to
Some parts of the site load data straight from other services. They see your IP address, as any website does, and handle it under their own privacy policies:
- Address search in the booking panel sends what you type to Photon, run by komoot, to suggest real addresses.
- Route and fare: the start and end points go to the OSRM routing service to measure the drive.
- Payments: the card step on the taxi page loads Stripe, which sets the cookies listed below to spot fraud.
- Hosting: the site runs on Vercel, whose servers see your IP address as any host does.
- The aurora map loads map tiles from Esri. The cloud picture comes from EUMETSAT through our own server, so your browser does not talk to them.
- Fonts load from Google Fonts.
- Partner links. When you follow a link to a place to stay, a flight search, car hire, a tour, travel insurance or a phone plan, you are on the partner's own site, and their cookies and privacy policy apply there.
Cookies
Necessary, no consent needed. Stripe sets two cookies on the taxi page once the card step opens, to tell a real customer from a fraud attempt. Our own login cookie exists only on the owner's computer. Your browser also stores, as local storage rather than cookies, the key to a trip plan you saved, your answer on the cookie bar, and a draft of the booking form so a reload does not lose it.
Optional, only with your consent. None at the moment. If we start counting visits, that script will load only after you press Accept on the bar at the bottom of the page. Decline keeps only the necessary ones. You can change your answer any time through the Cookies link in the footer.
Your location
If you press “use my location” on the aurora map, your browser asks your permission first. The position is rounded to about a kilometre and sent to our server only to work out the cloud and aurora forecast for that spot. We do not store it. On the taxi page, the location button only fills in your pickup address: your browser sends the position to Photon to find the street name.
How long we keep it
Booking requests are kept for as long as we need them to run and account for the ride, and for as long as Finnish bookkeeping law requires. After that they are deleted. The company that hosts the site keeps ordinary server logs, such as IP addresses and times of requests, for a short time for security.
Your rights
You can ask to see the details we hold about you, to have them corrected, or to have them deleted when we no longer have to keep them. Email info.laplandstory@gmail.com and we will answer within a month.
If you think we have handled your data wrongly, you can complain to the Finnish Data Protection Ombudsman at tietosuoja.fi.
Changes
When the site starts doing something new with personal data, we update this page first and change the date at the top.