Privacy Policy

Who we are

Vacationary ("we", "us") is a small travel publishing project run by Mark and Anna. We sell curated travel itineraries as digital downloads at vacationary.co. If you have questions about this policy, email us at hello@vacationary.co.

What we collect

• Account information. When you sign up, we store your email address and authentication data. If you sign in with Google, we receive your email and basic profile info from Google.
• Google sign-in data. When you sign in with Google, we receive your email address, name, and profile picture from Google. We use this only to create and access your Vacationary account. We don't store, share, or use your Google account data for any other purpose, and we don't request access to your Gmail, Drive, contacts, or any other Google services. To revoke access, email us at hello@vacationary.co and we'll delete your account.
• Purchase information. Payments are processed by Paddle, our merchant of record. Paddle collects billing details (name, address, payment method, tax info). We receive a record of the transaction but never see your full card details.
• Usage data. We use Google Analytics to understand how people use the site. This includes cookies, device and browser info, IP address (truncated), pages viewed, and referring URLs.
• Communications. If you email us, we keep that conversation so we can help you.

How we use it

• To give you access to itineraries you've purchased.
• To process payments and provide receipts (via Paddle).
• To respond to support requests.
• To understand what's working on the site and improve it.
• To send transactional emails (purchase confirmations, account emails). We don't send marketing emails unless you opt in.

Who we share it with

We don't sell your data. We share it only with the services we need to run Vacationary:

• Supabase: database and authentication hosting.
• Paddle: payment processing and tax handling.
• Google Analytics: site usage analytics.
• Cloudflare: site hosting and delivery.

Cookies

We use cookies that are strictly necessary to keep you signed in and to remember your session. We also use Google Analytics cookies to measure site usage. You can disable cookies in your browser settings, but parts of the site may stop working.

Your rights

Depending on where you live (e.g. EU/UK under GDPR, California under CCPA), you have the right to:

• Access the personal data we hold about you.
• Correct or update it.
• Delete your account and associated data.
• Export your data.
• Object to or restrict certain processing.

Email hello@vacationary.co and we'll handle it within 30 days. Note: Paddle retains transaction records as required by tax law even after account deletion.

Data retention

We keep your account data while your account is active. Purchase records are retained for up to 7 years for tax and accounting purposes. Analytics data is retained per Google Analytics defaults (currently 14 months).

Children

Vacationary is not intended for children under 16. We don't knowingly collect data from them.

Changes to this policy

If we make material changes, we'll update the "Last updated" date and, where appropriate, notify you by email.

Contact

Questions or requests: hello@vacationary.co.