Privacy Policy

What we collect

When you use The Next Passport, we collect:

• Account information — your email address and authentication details when you sign up
• Lineage data — names, dates, and places you enter about your ancestors to generate your personalized checklist
• Checklist progress— which documents you've marked as complete and any notes you've added
• Payment information — processed securely by Stripe. We never see or store your full card number.
• Waitlist email — if you sign up to be notified when a country becomes available, we store your email address and the country you selected. We use this only to send a single notification when that country launches. Waitlist emails are deleted within 90 days of notification. You can request removal at any time by emailing support@thenextpassport.com.

What we do not collect

We do not collect or store identity documents, passport scans, government IDs, or any other sensitive files. The Next Passport is a checklist and organization tool — not a document vault.

How we use your data

Your data is used to:

• Generate and display your personalized document checklist
• Save your progress across sessions
• Process payments through Stripe
• Respond to support requests

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Where your data is stored

Your data is stored in Supabase (hosted on AWS in the United States). All data is transmitted over HTTPS and stored with row-level security policies that ensure you can only access your own data.

Cookies & analytics

We use the following cookies and browser storage:

• Authentication cookies (essential) — keep you logged in and maintain your session. These cannot be disabled.
• Wizard progress (local storage) — saves your eligibility and lineage data in your browser until you create an account. Expires after 14 days.
• Analytics — we use Vercel Analytics to collect anonymous page view and performance data (Web Vitals). No personally identifiable information is collected.

We do not use advertising cookies or third-party tracking pixels.

Deleting your data

You can request deletion of your account and all associated data by emailing support@thenextpassport.com. We will process deletion requests within 30 days.

Third-party services

We use the following third-party services:

• Supabase — database, authentication, and data storage (email, lineage data, checklist progress)
• Stripe — payment processing (email, payment method)
• Vercel — application hosting, anonymous analytics, and performance monitoring
• Sentry — error tracking to identify and fix bugs (user ID only, no personal details)
• Cloudflare — DNS and email routing
• Meta (Facebook) — optional social login (only if you choose to sign in with Facebook)

Each service has its own privacy policy governing how they handle data.

Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of The Next Passport after changes constitutes acceptance of the updated policy.

Who operates this service

The Next Passport is operated by Warner Creates LLC, a Massachusetts limited liability company.

Contact

For questions about this privacy policy or your data, email support@thenextpassport.com.