Request an invitation
Privacy

Your privacy.

Sanctums is a private travel house. Discretion is the heart of what we do, and it begins with how we treat what you tell us.

Last updated 10 November 2026

The free family planner

  • Your plan. When you make a plan, we keep your answers to the four questions (where you start from, who is going including children's ages, where to and when), any notes, and any bookings you add. We create a private edit key for you; we keep only a one-way code made from it, never the key itself.
  • Bookings you paste. When you paste a confirmation, Sanctums reads it to suggest the dates, reference, price and cancellation terms. We don't keep the pasted text; only the details you check and save.
  • Watches. For a booking you ask us to watch, we keep its name, dates, price and free-cancellation date, and once a day prepare a reminder before that date. A person checks each reminder before it is sent to you.
  • Family card. Only if you tick the consent box, we keep what you type there: names or initials, children's ages, school-holiday dates, the names of travel cards you hold (never numbers) and your hotel and airline status. We never read your chats or email to fill it in. Untick the box and we delete it.
  • Sharing. Anyone with your share link can see the trip, who is going (children's ages only if you allow it), booking names, dates and supplier links, and the comments, and can add a comment with a name they choose. They never see confirmation numbers, prices, your family card details or your email.
  • Email, if you add one. Used only to reach you about that plan. Nothing is emailed automatically during this early test.
  • Counting. We count, without names, how many steps and minutes it takes to make a plan, so we can make it shorter, and we publish totals on our numbers page.
  • Deleting. "Delete this plan" removes the plan, its bookings, watches, family card and comments for good.

What we keep

  • Your request. When you request an invitation, we keep what you write in the form: your name, email, telephone if you give it, who is travelling, when, the journey you have in mind and any details you choose to add. We also note the page you came from and your approximate country and city, so we know where to begin.
  • Your conversation with Victor. Victor, our AI concierge, speaks with you by live video through our provider, Tavus. Your camera and microphone are used only if you allow them in your browser. The video is not recorded. We keep a written transcript of the conversation, so that you never have to repeat yourself to Glenn.
  • A preview prepared for you. If someone sent you a personal link, we note when it is opened, so we know the preview arrived.
  • The Antarctic Passage. The name and city you type stay in your browser. The city is looked up once, through OpenStreetMap, to find it on the map.
  • A personal invitation. If Glenn prepared an invitation for you, it holds your name, how you like to be greeted, the kinds of places you love and who introduced you, so the site and Victor can be personal to you. A small cookie remembers the invitation on your device for 60 days. The three choices you make on the site (who is travelling, the pace, what matters most) are kept in your browser and with your invitation.
  • Your private screening. If you introduce yourself on the invitation card, we keep your first and last name, email and mobile number, the answers you give (who is travelling, when, what you love, the pace you like, where you would fly from, anything you tell us) and which parts of the screening you have watched, so it stays personal on any device. You can return on another device with your mobile number alone; the site never shows your email or number back on screen. Each permission you give (to keep your profile, and separately to email, call, or text or WhatsApp you) is stored with the time, the wording version and your language. The same small cookie remembers you for 180 days.
  • Security. To keep the site and Victor available to guests, we keep a one-way, shortened code made from your internet address, never the address itself, to apply fair-use limits.

How we use it

Only to reply to you, to prepare your journey and to arrange your conversation with Glenn Orgin, our founder. We do not sell or rent your details, and we do not use advertising or tracking cookies on this site; the only cookie is the one that remembers a personal invitation or your private screening. To change or withdraw a permission, or to have your details deleted, write to Glenn and it will be done.

Who helps us

  • Cloudflare hosts this site and stores your request and your plans securely.
  • Tavus provides Victor's live video conversation and its transcript.
  • Google provides the photorealistic 3D map tiles in the Passage; OpenStreetMap and Open-Meteo find your city and its elevation.

When you travel with us, the operators, hotels and pilots who look after you receive only what they need to do so, and only once you have agreed your journey.

How long we keep it

For as long as we are in conversation with you, and, if you travel with us, for as long as you are a client, so that each journey begins where the last one ended. Ask us at any time and we will delete it.

Your choices

  • Ask to see what we hold about you, to correct it or to delete it, by replying to any email from us or by writing through the request form.
  • Stop hearing from us at any time on the unsubscribe page, or with the link in any email we send.

Children

This site is for adults. We learn about children only from what a parent or guardian chooses to tell us, such as their ages, to plan a family journey.