Your data, in plain words.

Last updated 25 October 2026

Who is responsible

Hora Valencia, run by Dan, is the controller of your personal data. Contact: dannjeru555@gmail.com.

What we collect, and why

• Booking details (name, email, date, start time, duration, number of guests, an optional note, and whether an AI assistant made the request). We use these to request and confirm your booking with the hotel.
• Account details (email, your name, and your password, which is stored only as a hash). We use these to let you sign in and manage your bookings.
• Hotel details (hotel name, area, a contact, the spaces you list and their photos). We use these to review, publish and run your listings. Photos you upload are public.
• Call bookings (name, email and the slot you choose). We use these to hold your 30-minute call.
• Messages you send us by email. We use them to reply.

Our legal bases are performing the booking or service you asked for, our legitimate interest in running and securing the service, and, where the law requires it, your consent.

What we don't do

• We don't sell your data.
• We don't use advertising or analytics trackers on this site.
• We don't take payment card details. During the pilot you pay the hotel directly.

Who sees your data

• The hotel you book. It receives what it needs to host you: your name, your email, the date and time, the number of guests and any note you add.
• Supabase hosts our database, sign-in and photo storage. Our project runs in the EU (Paris, France).
• Cloudflare hosts the website and booking API, and handles connection data such as IP addresses to deliver the site and protect it from abuse.
• Google Fonts and jsDelivr serve the site's typefaces and a script library. Your browser contacts them directly when a page loads, so they can see your IP address.

Some of these providers may process data outside the EU. Where they do, they rely on legal safeguards such as the EU Standard Contractual Clauses.

Cookies and local storage

We use no advertising or analytics cookies. If you sign in, your browser stores a session token in local storage so you stay signed in; this is strictly necessary for sign-in to work. Your browser also remembers your language choice, the spaces you save with the heart, the last space you looked at, the fact that you have visited before, and, for the current tab only, your conversation with the help chat. All of this stays on your device.

How long we keep it

We keep your account and bookings while your account is open and for as long as needed to handle questions or disputes about a booking. We keep records we are legally required to keep for as long as the law says. When you ask us to delete your account, we delete your personal data apart from those records.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it to another service. Email dannjeru555@gmail.com and we'll reply within one month. You can also complain to the Spanish data protection authority, the AEPD.

Changes

If we change this policy in a way that matters, we'll update the date above and tell account holders by email.