That boarding pass PDF from a 2019 trip? It's still in your email. So is the passport scan you sent your travel agent. And the hotel booking with your home address, card's last four digits, and frequent-flyer number.

Travel documents are a privacy landmine. They bundle your name, birthdate, passport number, and payment details into one tidy file — then sit in your inbox for years. If someone breaks into your email, those files hand them everything at once.

Here's a beginner project: a self-hosted folder that shreds travel files on a schedule.

Why travel files are worse than most

A random photo leaking is annoying. A boarding pass leaking is identity theft fuel. The barcode on a boarding pass often encodes your full name and frequent-flyer number — enough for a scammer to phone the airline and reset your account.

You don't need these files after the trip. So why keep them forever?

The tool: a folder that deletes itself

You'll use Nextcloud, a free self-hosted file app you run on a spare laptop, a Raspberry Pi, or an old mini PC. Think of it as your own private Dropbox.

Nextcloud has a built-in feature called Retention (via the "Files automated tagging" and "Retention" apps). It works like this:

  1. Install Nextcloud (a one-click option exists on most home-server setups).
  2. Make a folder called Trips.
  3. Tag the folder so any file inside expires after, say, 90 days.
  4. Drop your boarding passes, hotel PDFs, and booking screenshots in there.

Ninety days after your trip, the files vanish automatically. No reminder. No cleanup chore. No forgotten passport scan haunting your storage in 2030.

The 3-step privacy routine for any trip

Before you fly: Save travel docs to your Trips folder — not your email, not your phone's camera roll. Send them to yourself from Nextcloud when you need them.

During the trip: Screenshot only what you need at the airport, then delete the screenshot when you land. Airline apps hold the live version anyway.

After you're home: Do nothing. The retention rule does the shredding for you.

One thing to never auto-delete

Receipts you need for tax or expense claims. Keep those in a separate Keep folder with no expiry. The whole point is to shred the risky stuff fast while protecting what you actually need.

Why self-host this instead of using the cloud

Google and Apple keep 'deleted' files in trash and backups for weeks — sometimes longer. On your own Nextcloud, delete means delete. You set the rule, you own the disk, and no company mines your travel history to guess where you'll fly next.

Your takeaway: Tonight, make one folder called Trips, set a 90-day expiry, and move every travel PDF out of your email into it. Your most sensitive documents should have the shortest lifespan — not the longest.