Is GetYourGuide safe?
GetYourGuide
GetYourGuide is one of the safer ways to book tours and attraction tickets. We found no data breach, the app has a tracking switch, and only past customers can review. Its weak spot is a €5.6 million Italian fine, upheld in court in 2026, for using bots to buy up Colosseum tickets and resell them in pricier packages.
#11of 74 in Travel, rides and delivery
Medium confidence- App publisher
- GetYourGuide AG; data controller GetYourGuide Deutschland GmbH (Berlin)
- Italian fine
- €5.6 million, AGCM (April 2025), over Colosseum ticket bots; upheld by the Lazio court (Feb 2026)
- Reported breaches
- None found
- Security reports
- Public vulnerability disclosure programme on HackerOne, no cash rewards
- Reviews
- Only customers who booked the activity can leave one
- App Store label
- Identifiers used to track you; email and device ID used for third-party ads
- Age rating
- 13+ (App Store)
How the score breaks down
The overall score is the weighted average of these factors. Scoring rules
Privacy30% of score
52 out of 100, WeakApple's label lists identifiers used to track you and links email and device ID to you for third-party advertising. The August 2026 policy names Meta, Google, TikTok, Criteo and Microsoft for ads and Hotjar for session recordings. Location is listed as not linked to you.
Security30% of score
64 out of 100, FairWe found no reported breach. GetYourGuide takes vulnerability reports through a public HackerOne programme but pays no bounties, and says it stores IP addresses encrypted and deletes them after 30 days. It publishes little on account protection.
Transparency and control15% of score
65 out of 100, FairThe policy, updated August 2026 under EU law, sets out erasure, portability and objection rights and names a Berlin controller. A "Privacy Preferences" menu in the app lets you switch off trackers and SDKs.
Scams and harmful content15% of score
68 out of 100, FairUser content is limited to reviews, and the policy says you can review an activity only after you booked and took part. Operators handle activities and their own data as separate controllers, so quality and refund disputes are the common complaints.
Regulatory record10% of score
58 out of 100, FairItaly's AGCM fined GetYourGuide Deutschland €5.6 million in April 2025 for using bots to buy Colosseum tickets and resell them bundled at higher prices. The Lazio administrative court upheld the fine in February 2026. The company denies using bots.
Is GetYourGuide safe?
For booking a walking tour, a museum ticket or a day trip, GetYourGuide is one of the safer apps in travel. We found no data breach. It runs under EU privacy law with a Berlin data controller, and only people who booked an activity can review it. The mark against it is a consumer ruling. In April 2025 Italy's competition and consumer authority fined it €5.6 million for using bots to sweep up Colosseum tickets and resell them in pricier packages, and a court upheld the fine in 2026. We score GetYourGuide 61/100.
The Colosseum ticket fine
For years tourists complained that base-price tickets for the Colosseum sold out online within moments, while the same entry was easy to buy as part of a guided tour at a much higher price. Italy's AGCM opened an investigation in July 2023 and announced its decision on 8 April 2025. CoopCulture, which ran the official ticket office from 1997 to 2024, was fined €7 million for failing to stop bulk buying and for keeping many tickets for its own tours. Six online operators were fined more than €12 million between them: GetYourGuide Deutschland, Tiqets, Walks, Italy With Family, City Wonders and Musement. GetYourGuide's share was €5.6 million.
The regulator found that these operators used bots or other automated tools to buy base-price tickets as soon as they were released. They then sold them bundled with services such as guided tours or skip-the-line entry, at much higher prices. LaPresse reported that their conduct was found aggressive under articles 24 and 25 of Italy's Consumer Code. Unlike the hotel competition cases against Booking.com and Trip.com, this one is about harm to travellers, so we count it in full.
GetYourGuide rejected the finding. It said neither it nor its affiliate GetYourGuide Tours & Tickets ever used bots, and that its staff bought tickets by hand through a business channel CoopCulture provided. It took the case to the Lazio administrative court, which rejected the appeal in a judgment published on 12 February 2026 and ordered GetYourGuide to pay €3,500 in costs. The court found that the evidence showed automated bulk buying from July 2019 to October 2023, including by GetYourGuide Tours, and that the authority had reasonably linked it to the resale at higher prices.
For travellers the lesson is to check the official ticket office first and compare its price with any bundled tour.
What the app tracks
Apple's label for GetYourGuide is moderate for a travel app. Device identifiers are listed as used to track you across other companies' apps and websites. Your email address and device ID are linked to you and used for third-party advertising. Purchases, payment info, name, phone number, search history and support messages are also linked to you. Unlike Klook's label, it lists location only as not linked to your identity.
The privacy policy, last updated in August 2026, names the partners. Meta receives app events with hashed identifiers to measure and target ads. Google, TikTok, Criteo and Microsoft run remarketing and ad measurement. Adjust and Smartly analyse ad campaigns, and Hotjar records a sample of visitor sessions as heat maps, kept for 365 days. The policy says several of these run only if you consent. The app has a "Privacy Preferences" section in its menu where you can switch groups of trackers off.
Some data goes beyond GetYourGuide. For certain activities you may be asked for a passport number, participants' ages, or dietary and accessibility needs, which can count as health data. The operator running the activity receives what it needs, and the policy says operators are separate data controllers.
Security and accounts
We found no reported breach of GetYourGuide accounts or payment data. It accepts vulnerability reports through a public programme on HackerOne, but pays no bounties, which gives outside researchers less reason to look than Agoda's paid programme does. The policy says IP addresses are stored encrypted and deleted after 30 days. You do not need an account to book. Booking as a guest leaves less data behind.
How to book more safely
- Book as a guest if you do not need an account.
- Open "Privacy Preferences" in the app menu and switch off marketing trackers.
- Check the cancellation terms on each activity before you pay; operators set them.
- For famous sites, compare the price with the official ticket office before you buy a bundled tour.
- For risky activities such as diving or boat trips, ask the operator about its licence and insurance; reviews do not tell you that.
How we scored it
Scams and harmful content (68) is the strongest factor, because only customers can post reviews and there is little else for others to post. Privacy (52) is the weakest, given email-based ad targeting and a long list of ad partners. Security (64) reflects a clean record but no paid bug bounty. The regulatory record (58) rests on the €5.6 million Italian consumer fine, now upheld in court. Airbnb scores 60 and Klook 56.
Questions people ask
Is GetYourGuide legit?
Yes. GetYourGuide is a Berlin-based booking platform for tours, attraction tickets and day trips, and its data controller is GetYourGuide Deutschland GmbH. Most activities are run by independent local operators that sell through it. We found no data breach or privacy fine, though Italy fined it in 2025 over how it obtained Colosseum tickets.
Why was GetYourGuide fined in Italy?
On 8 April 2025 Italy's competition and consumer authority, the AGCM, fined GetYourGuide Deutschland €5.6 million, one of six online operators fined more than €12 million in total. It found they used bots to buy up base-price Colosseum tickets and resold them bundled with tours or priority entry at higher prices, an aggressive practice under Italy's Consumer Code. GetYourGuide denied using bots and appealed, but the Lazio administrative court upheld the fine in February 2026.
Are GetYourGuide reviews real?
GetYourGuide's privacy policy says you can rate an activity only after you booked it and took part, which makes fake reviews harder than on open review sites. Reviews still show what past customers thought, not how safe an activity is. For adventure sports or boat trips, check the operator's licence and insurance too.
Who gets my data when I book on GetYourGuide?
The operator running your activity gets the details it needs, such as your name, phone number and sometimes passport number or dietary needs. GetYourGuide's policy says operators act as separate data controllers, so their own privacy policies apply to that data.
Can I turn off tracking in the GetYourGuide app?
Yes. The privacy policy says the "Privacy Preferences" section in the app menu lets you turn trackers, SDKs and similar technologies on or off by group. On an iPhone you can also refuse the request to track you across other companies' apps.
Sources
- 1.GetYourGuide: Plan & Book, App Store listing and App Privacy label (opens in a new tab) · Apple App Store, 2026
- 2.GetYourGuide privacy policy (last updated August 2026, archived copy of 14 October 2026) (opens in a new tab) · GetYourGuide, 2026
- 3.GetYourGuide VDP (opens in a new tab) · HackerOne, 2026
- 4.Antitrust announces 20 mn in fines over Colosseum tickets (opens in a new tab) · ANSA, 2025
- 5.Colosseo, vendita biglietti, multa da 20 milioni dall'Antitrust (opens in a new tab) · LaPresse, 2025
- 6.Biglietti Colosseo, sanzioni per 20 milioni di euro a CoopCulture e 6 operatori turistici online (opens in a new tab) · Quality Travel, 2025
- 7.TAR Lazio (Sezione Prima), sentenza n. 2651/2026, GetYourGuide Deutschland GmbH v. AGCM (opens in a new tab) · Tribunale Amministrativo Regionale per il Lazio, 2026
- 8.Biglietti Colosseo, confermata maximulta Antitrust a società 'accaparratrice' (ANSA) (opens in a new tab) · l'Adige / ANSA, 2026
- 9.GetYourGuide e la multa per i biglietti del Colosseo: "Presenteremo ricorso al Tar" (opens in a new tab) · TTG Italia, 2025