Updated October 23, 2026
This policy explains how TodayNYC handles information through todaynyc.app, the editorial website and the TodayNYC plugin and its read-only MCP planning service. TodayNYC has no separate account system; ChatGPT manages access to the plugin and does not sell personal information.
The data controller for TodayNYC is Miguel Herrero Burgos, Spain, operating the TodayNYC service. Privacy enquiries can be sent to advertise@todaynyc.app.
When you ask an OpenAI product to use the TodayNYC plugin, the service receives the Manhattan neighborhood, station, or known place needed to build the plan. It may also receive an optional start date and time, the fixed 180-minute duration, and a supported language preference. The service uses these inputs only to resolve the requested area and return matching plans from TodayNYC’s catalog.
TodayNYC does not require your name, email address, OpenAI account identifier, payment information, precise GPS coordinates, or the rest of your conversation. Please do not include sensitive personal information or a private residential address in a planning request. TodayNYC does not use plugin inputs for advertising and does not store the place, date, time, language, or returned plan in its application logs or a user profile.
The service temporarily uses the request’s network address in memory to apply an abuse-prevention limit. That in-memory entry expires after 60 seconds and is also cleared when the service restarts. Standard web-server security logs may contain the network address, request time, method, endpoint, response status, browser or client identifier, and response size. Those logs do not contain the MCP request body and are rotated daily and deleted after 14 days.
The website stores cookie consent in your browser. The retired app may have left planning preferences on your device until you clear browser storage. The standalone arrival-planning interface is no longer public. TodayNYC does not send an exact arrival time or hotel address to Google Analytics.
TodayNYC uses optional Google Analytics 4 to understand use of the website and improve the product. Consent Mode starts with analytics and advertising storage denied. Analytics load only after you accept them; advertising storage, advertising user data, ad personalization, remarketing, and Google Signals remain disabled. If analytics are accepted, TodayNYC may record coarse product information such as arrival mode, transport hub, lead-time range, time-of-day band, selected duration, and whether a plan was generated. Google’s retention settings govern analytics data held by Google.
TodayNYC may keep anonymous operational counts for plans generated, interactive plans opened, and plan-sharing actions. A random, short-lived flow identifier allows related steps to be counted as a funnel. These records exclude conversation text, location text, exact coordinates, account identifiers, and names. Coarse fields such as category, duration, number of options, and share method may be recorded.
The standalone website app was retired on October 23, 2026. Previously, when using its AI chat, the messages and approximate location text you submit are sent to OpenAI through its API so OpenAI can generate a response. TodayNYC does not save that conversation or location text in its own database. OpenAI processes API inputs and outputs under its own data controls and retention terms. TodayNYC separately keeps only the anonymous operational counts described above and applies anonymous rate and spending limits to protect the service.
The retired app offered an optional microphone button; speech recognition is provided by your browser or operating system after you grant permission. TodayNYC receives the resulting text, not an audio recording, and does not upload or store microphone audio. Voice processing depends on the privacy terms of the browser or speech service you use.
TodayNYC uses the limited information described above to provide the requested plan, maintain security and availability, diagnose failures, measure aggregate product use, and improve the service. TodayNYC does not use plugin planning inputs to create advertising profiles or to train a TodayNYC machine-learning model.
Where European data-protection law applies, processing needed to answer a request or provide the service is based on performing the service you requested; security, abuse prevention, diagnostics, and service improvement are based on TodayNYC’s legitimate interests; optional analytics are based on consent; and disclosures required by law are based on the relevant legal obligation. You may withdraw analytics consent at any time without affecting earlier lawful processing.
Information may be processed by hosting, network, and security providers that operate TodayNYC’s infrastructure; by OpenAI when you use an OpenAI product or the website AI chat; and by Google only for optional website analytics after consent. These providers process information for their respective service functions and under their own applicable terms. TodayNYC may also disclose information when reasonably necessary to comply with law, protect users or the service, or investigate abuse. Clicking an external venue, map, or source link sends the destination the ordinary information associated with a web visit.
Some providers may process information outside Spain or the European Economic Area. Where TodayNYC is responsible for such a transfer, it relies on an applicable adequacy decision, approved contractual safeguards, or another lawful transfer mechanism. OpenAI products used independently by you are governed by the relationship and privacy terms between you and OpenAI.
Plugin planning inputs and results are processed for the request and are not persisted by the TodayNYC MCP application. Rate-limit network-address entries expire after 60 seconds. Web-server security logs are deleted after 14 days. Browser preferences remain on your device until you clear them. Anonymous aggregate or operational counts may be retained for product measurement because they are designed not to identify a user. Information held by OpenAI, Google, or another provider follows that provider’s retention rules.
TodayNYC uses transport encryption, request-size limits, rate limits, restricted service methods, and minimal application logging. No internet service can guarantee absolute security.
You can choose not to use the plugin, omit the optional start time, disable the plugin in the OpenAI product, change or withdraw website analytics consent through “Cookie settings,” and clear browser storage. Because the plugin is designed without accounts or stored planning histories, TodayNYC usually cannot retrieve a plugin request by user identity.
Where applicable, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent. Email advertise@todaynyc.app. TodayNYC may need enough information to verify and complete the request. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or the competent supervisory authority where you live or work.
TodayNYC is a general travel-planning service and is not directed to children under 13. If you believe a child has provided personal information to TodayNYC, contact us.
TodayNYC may update this policy as the service changes. Material revisions will be reflected on this page by changing the effective date.