Privacy policy
1. Who is responsible
Your Stay Pages at yourstaypages.com is operated by Your Stay Pages. Contact [email protected] about your personal data.
We manage account and service information. A property owner decides what they put in their guest book, including third-party contact details. Owners are responsible for ensuring they have permission to include personal information in their books.
2. Information we collect
Account information includes your name, email address, a securely hashed password, verification status and relevant account timestamps. We record the time you agree to the Terms and the versions of the Terms and Privacy Policy shown to you.
Property information includes the details you enter, selected source and guest languages, draft revisions and any published content. Information you submit to support may include your contact details and the issue you describe.
Security processing uses connection information, including an IP address, to limit repeated account requests. The account rate-limit database stores keyed hashes and attempt counts, not raw email addresses or IP addresses. Hosting and other service logs may separately contain connection data; these support service operation and security.
3. How we use it
We use account information to create and secure your account, verify your email address, sign you in and provide password-reset messages. We use property content to save your drafts and provide the guest books you choose to publish. We use support information to respond to your requests.
We use verified subscription information to apply your property allowance and renewal status, and selected content to generate translations.
We use information to provide the service you request, protect accounts and respond to support requests. Account details are needed to create and manage your account. Marketing consent is separate from account registration.
4. What guests can see
Published content is intended to be visible to people who open the property’s guest link or scan its QR code. A link can be forwarded. Do not place private guest information, door or alarm codes, identity documents or payment details in a book.
Owners decide which ready language versions to publish. A guest account or app installation is not required to read a guest book.
5. Providers and sharing
Service providers support hosting, email delivery and troubleshooting. Authorised administrators can access email logs containing recipients, subjects, message contents, headers and sending errors to investigate delivery issues.
Payment providers process payment details through secure checkout. The property editor does not collect card details. Translation providers process the source content needed to generate your selected language versions.
We may disclose information where required by applicable law or to investigate and respond to security incidents.
6. International processing
Provider systems may process data outside your country. Contact [email protected] for information about providers and international processing.
7. Cookies
Account access uses WordPress authentication cookies. Account forms also use a session cookie, ysp_nonce_session, to protect submissions. It contains a random identifier, uses HTTPS security settings and is intended to last for the browser session.
These cookies support account access and form security. You can manage cookies in your browser; blocking essential cookies may prevent account features from working.
8. How long information is kept
Email-verification links expire after 24 hours. Expiry makes a link unusable; it does not automatically delete an unverified account. Security rate-limit records expire and are removed through scheduled cleanup.
We retain information as needed to provide your account and service, handle support, protect against misuse and meet applicable legal obligations. Contact [email protected] to request deletion or ask about the retention of particular information.
9. Your rights and requests
Depending on the law that applies, you may have rights to access, correct or delete personal data, restrict or object to its use, receive a portable copy, or withdraw consent where consent is the basis for processing. Contact [email protected] to make a request. We may need proportionate information to confirm your identity.
You may also complain to the relevant data-protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.
10. Security and updates
We use account authentication and owner-scoped access controls to help protect information. No online service can guarantee absolute security.
We will update this notice when the service or its data handling changes and communicate material changes as required. Contact [email protected] with privacy questions.