Privacy

Who we are

En Masse (enmasse.app) is run by RicochetB2B, a UK business. We’re responsible for the personal information described here. Questions? Email hello@ricochetb2b.com.

What we collect

There are no sign-ups, so we never ask for an email address, phone number or password. We store:

• Board details the organiser enters – the trip name, places, dates, budget, notes, room details including children’s ages, and an optional list of first names.
• The names people join with – usually a first name or nickname.
• Holidays people add – links, names, prices, notes and any photo or screenshot uploaded. We strip location data from uploaded photos.
• Votes and comments, once those features are live. Votes are anonymous – we never show who voted for what.
• Basic usage events – for example that a board was created or a “View on…” button was tapped – so we know what’s working. These aren’t used to build profiles of anyone.
• Technical logs kept by our hosting provider, such as IP addresses and browser type, for security and fixing problems.

What’s stored on your phone

We don’t use cookies. We use your browser’s own storage to remember a random device code, which boards you’ve joined and as who, and – if you created a board – your organiser key. That’s what stops you having to join again every time. It’s needed for the site to work, so there’s no consent banner. Clearing your browser data removes it.

Who can see a board

Anyone with a board’s link can see what’s on it, including the names of people who’ve joined. Links are long and random so they can’t be guessed, but they can be forwarded – so only share them with people you’re happy to plan with. The organiser link is separate and private.

Why we use it

We use this information to run the service you’re using – showing the board to the group, working out rough prices, and sending you to the travel company when you choose a holiday. Under UK data protection law our basis for this is our legitimate interest in providing the service you’ve asked for. We don’t sell personal information, and we don’t use it for advertising.

Who helps us run it

• Supabase stores the database and uploaded photos (servers in Ireland).
• Vercel hosts the website (servers in Ireland; Vercel is a US company).
• Google – if we look up a photo of a hotel for you, we send Google the hotel’s name and location. We don’t send anything about you.
• Travel websites – when someone pastes a link, our server visits that page to read its title and photo. It doesn’t send anything about you.

Where any of these providers handle data outside the UK, they do so under recognised safeguards, such as the UK’s approved data transfer agreements.

When you click through to book

Tapping “View on…” or “Book with…” takes you to the travel company’s own website. For some companies the link goes through an affiliate network first (for example Partnerize), which may place a cookie on your device so the company knows you came from us. If you book, we may earn a commission – it doesn’t change the price. From then on, the travel company’s and the network’s own privacy policies apply. We don’t get your booking details or payment information.

How long we keep it

A board and everything on it is kept until the organiser deletes it from their organiser page – which deletes it for everyone, including photos. If you’d like your name or something you added removed, email us and we’ll sort it.

Children

En Masse is for adults planning trips. Organisers may enter children’s ages so prices and rooms make sense, but we don’t ask for children’s names.

Your rights

You can ask to see, correct or delete personal information we hold about you, or object to how we use it. Email hello@ricochetb2b.com. Because there are no accounts, tell us which board and the name you used, and we’ll take it from there. If you’re unhappy with how we’ve handled something, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If we change how we use information, we’ll update this page and the date at the top. See also our terms.