Privacy policy
Updated 7 November 2026
Data & purposes
The operator identified below handles your account name, email and sign-in provider identifier; listings, photos and contacts you submit; booking dates, party size, children’s ages, messages, favourites and calendar entries. These data operate your account, search, bookings and host workspace. An adult enters children’s ages; children do not need an account.
Sharing & security
A booking request shares the necessary guest details with its host. Published listings, location, photos and host contacts are public. Drafts and guest records are not public. Railway hosts the server and database in the United States; Cloudflare provides domain infrastructure. Google, Facebook or Apple handle the sign-in you choose. Map and address providers process map requests and location searches. Their processing can occur outside your country. Necessary session cookies and local preferences support sign-in, language, currency and favourites. Technical request data help operate and protect the service.
Retention & rights
We process data to provide the service you request, protect accounts and meet applicable legal obligations; where consent is required, you may withdraw it. Data remain while needed for these purposes. Deletion requests are reviewed manually; necessary dispute or legal records may be retained with an explanation, and backups expire on their retention schedule. You may request access, correction, deletion, restriction or a portable copy, object where applicable and complain to your local data-protection authority. Contact us below. We do not sell your personal data.