Is trivago safe?
trivago
trivago is a hotel price comparison site with no reported breach, and you can use it without an account. The weaker points are advertising, since its app lists your searches as data used to track you, and a 2022 Australian penalty for ranking hotels by what they paid it while implying they were cheapest.
#40of 74 in Travel, rides and delivery
Medium confidence- App publisher
- trivago N.V.
- Owner
- Expedia Group, with 59.2% of shares and 83.9% of votes (end of 2025)
- What it does
- Compares hotel rates from booking sites and sends you to them to book
- Australian penalty
- A$44.7 million (about US$33 million), Federal Court, April 2022
- App Store label
- Search history, device ID and advertising data used to track you
- Bug bounty
- Private, invitation-only programme on HackerOne
- Age rating
- 4+ (App Store)
How the score breaks down
The overall score is the weighted average of these factors. Scoring rules
Privacy30% of score
42 out of 100, WeakApple's label lists search history, device ID and advertising data as used to track you. Google Play says name, email and user IDs are shared for advertising, and the October 2025 policy names ad and marketing firms and social networks among recipients acting on their own account.
Security30% of score
66 out of 100, FairWe found no confirmed breach of trivago accounts, and most users never give it payment data. It runs a private, invitation-only bug bounty on HackerOne and says its programme is modelled on the NIST framework and ISO 27001, with penetration tests.
Transparency and control15% of score
60 out of 100, FairAn account is optional. The policy lists access, deletion, correction, restriction and portability rights and lets you withdraw consent to marketing cookies, and Google Play says deletion can be requested in the app.
Scams and harmful content15% of score
56 out of 100, FairAustralia's Federal Court found that trivago's rankings favoured hotels that paid the most per click while implying they were the cheapest. trivago takes no bookings itself, so refund disputes land with partner sites of mixed quality.
Regulatory record10% of score
45 out of 100, WeakAustralia's Federal Court ordered trivago to pay A$44.7 million (about US$33 million) in April 2022 after an ACCC case over misleading hotel price claims, which trivago paid that year. It also gave the UK CMA formal undertakings in 2019 on rankings and pressure selling.
Is trivago safe to use?
For comparing hotel prices, yes. trivago does not take your booking or your card, we found no confirmed breach of its accounts, and you can use it without signing in. Two things deserve caution. Its app is built around advertising, so your searches feed ad tracking. And its rankings have already been found misleading in court: in 2022 Australia's Federal Court ordered it to pay A$44.7 million. We score trivago 54/100.
Why Australia fined trivago
The Australian Competition and Consumer Commission sued trivago over the way it ranked hotels. The Federal Court found in January 2020 that trivago's algorithm put rooms from the sites paying the highest cost-per-click fee at the top, while presenting them as the cheapest or best deals. Often they were not. In April 2022 Justice Moshinsky ordered a penalty of A$44.7 million, about US$33 million at the time, and wrote that "the loss or damage caused by Trivago's contraventions was substantial". trivago said it had changed its site to comply.
That case still shapes how to read the app. trivago earns money when you click through to a booking site, so the first offer it shows is the outcome of a ranking, and paid placement is part of the business. trivago's own annual report for 2025 says regulators in Europe, Australia and elsewhere keep looking at how comparison sites rank results and present discounts. It also reports an Israeli class action over its rankings and discount claims, which went back to court after mediation ended. By August 2026 the plaintiff had narrowed it to one claim about how trivago presents recommended offers; trivago filed its defence in May 2026, and the case was in discovery, with no ruling, according to its half-year report.
In the UK, trivago was one of six hotel booking sites that gave formal undertakings to the Competition and Markets Authority in 2019, alongside Booking.com, Expedia, Hotels.com, Agoda and ebookers. They promised to stop pressure selling and misleading discount claims and to say when commission affects the order of results.
What the app tracks
trivago does not need much data to work, and it collects fairly little. What it does collect is aimed at advertising. Apple's label lists search history, device ID and advertising data as used to track you across other companies' apps and websites. Precise location, search history and your user ID are linked to you for analytics and personalisation.
Google Play is more direct about sharing. It says device IDs and app interactions are shared with other companies for advertising and marketing, and so are name, email and user IDs if you have an account. The privacy policy, last updated in October 2025, names advertising and marketing firms, social networks and fraud-prevention services among the companies that receive data, some as processors for trivago and some as independent controllers using it for their own purposes. When trivago served us its policy at its US address, it came in German. In the EU, marketing cookies need your consent. In the US, people have filed arbitration demands, the first group on 18 March 2026, alleging that tracking technologies on trivago's website broke the California Invasion of Privacy Act, according to trivago's half-year report. trivago says it has substantial defences; these are claims, not findings, and as private claims they do not change the score.
Security
Most trivago users never give it card details, which limits what a breach could expose. trivago runs a private bug bounty on HackerOne, open to invited researchers only, and its 2025 annual report says its security programme is modelled on the NIST Cybersecurity Framework and ISO 27001 and includes penetration testing. In June 2022 a hacker group listed trivago.co.il among more than 20 Israeli travel sites it said it had breached, most of them run by one local operator, according to The Jerusalem Post. We found no confirmation from trivago, so it does not lower the score.
How to use trivago well
- Treat the first result as an ad-influenced ranking: open two or three offers before choosing.
- Check the final price, fees and cancellation terms on the booking site, which may differ from the rate trivago showed.
- Note which company you are booking with; its terms and customer service apply, not trivago's.
- Use trivago without an account if you only want to compare prices.
- Refuse tracking when the app asks on an iPhone, and decline marketing cookies on the website.
How we scored it
Privacy (42) is the weakest factor, since searches and identifiers feed ad tracking. Regulatory record (45) is close behind, because a court-ordered A$44.7 million penalty over misleading rankings is a large consumer fine. Security (66) is the strongest factor, helped by holding little sensitive data. KAYAK scores 60 and Skyscanner 63.
Questions people ask
Is trivago a booking site?
No. trivago is a price comparison site. It shows rates from hotel websites and online agents such as Expedia and Booking.com and sends you to one of them to book, and that company takes your payment and handles changes and refunds. Check who you are booking with before you pay.
Why was trivago fined in Australia?
The ACCC took trivago to court over its hotel rankings. The Federal Court found in January 2020 that trivago gave top spots to hotels whose sellers paid the highest cost-per-click fee while presenting them as the best deals, and in April 2022 it ordered a penalty of A$44.7 million. trivago said it had changed its website to comply.
Does trivago always show the cheapest price?
Not necessarily. Its top result has to be read as a ranking, not a guarantee. The court found that the old ranking favoured advertisers who paid most, and trivago still earns money when you click through to a partner. Compare a few offers and the final price on the booking site.
Is trivago owned by Expedia?
Yes, in effect. Expedia Group owned 59.2% of trivago's shares and 83.9% of the voting power at the end of 2025, according to trivago's annual report.
Do I need a trivago account?
No. You can search and compare without one. An account unlocks extra features such as a wider range of prices, but it also links your searches to your email, which trivago's Google Play listing says may be shared for advertising.
Sources
- 1.trivago: Compare hotel prices App Store listing and App Privacy label (opens in a new tab) · Apple App Store, 2026
- 2.trivago data safety section (opens in a new tab) · Google Play, 2026
- 3.trivago privacy policy (Datenschutzhinweise), October 2025 (opens in a new tab) · trivago, 2025
- 4.trivago N.V. annual report on Form 20-F for 2025 (opens in a new tab) · US Securities and Exchange Commission, 2026
- 5.trivago bug bounty programme (opens in a new tab) · HackerOne, 2026
- 6.Australia fines Expedia Group's Trivago $33 million on misleading hotel room rates (opens in a new tab) · Reuters via Yahoo Finance, 2022
- 7.Major overhaul of hotel booking sector after CMA action (opens in a new tab) · Competition and Markets Authority, 2019
- 8.Iranian hackers leak info of over 300,000 Israelis from tourism sites (opens in a new tab) · The Jerusalem Post, 2022
- 9.trivago N.V. Form 6-K, unaudited financial statements for the six months ended 30 June 2026 (Note 12, legal proceedings) (opens in a new tab) · US Securities and Exchange Commission, 2026