Privacy

Winston Dube runs Holiday Board and is the data controller for everything described here. Write to hello@holidayboard.app about anything on this page.

Your account. Your first name, the name shown to other people on your trips, your email address, your preferred currency, and either a hashed password or the fact that you signed in with Google. Passwords are hashed, never stored in a form anybody can read.

What you put in a holiday. The destination and dates, every plan and its times, places, addresses and notes, links you save, your packing list, your outfits, the screenshots and photos you upload, expenses and who owes what, and the invitations you send.

Payments. Card details are handled entirely by Stripe and never reach Holiday Board. What is stored is the fact of a purchase, the amount, and the Stripe identifiers needed to tie a payment to your account.

Messages you send us. The contact form stores your name, email, the topic and what you wrote.

How the product is used. A fixed list of about twenty named events — an account was created, a plan was added, the upgrade page was shown, a purchase happened — along with the page it happened on. These are recorded on our own server. There are no third-party analytics, no advertising pixels, no session recording, and no IP address or browser fingerprint is stored against them.

Stopping abuse. To rate-limit sign-in attempts and the contact form we count requests against a salted, one-way hash of your IP address or the email address that was typed. The original value is never written down, and these counters are deleted within twenty-four hours.

Only the ones the site cannot work without, so there is no cookie banner to click past.

• A sign-in cookie, so you stay signed in.
• If you sign in with Google, three short-lived cookies that make that round trip safe. They last ten minutes and are deleted as soon as you are signed in.

There is no advertising cookie and no analytics cookie. To see which of our pages leads people to sign up we read the referring page from the request itself, which is information your browser sends anyway and is not stored on your device.

This is the part worth reading twice, because it is the one people are surprised by.

Everyone you invite to a holiday can see everything on that holiday: every plan, the times and places, the notes, the screenshots, the packing lists, the outfits and the full money ledger including what each person paid and what they owe. Holiday Board is a shared board, and there is no private area inside a trip.

People on one holiday cannot see any of your other holidays, and nobody outside a holiday can see anything on it.

These companies handle data on our behalf, each only for its own job.

• Railway — hosting. The database and your uploaded files live there.
• Stripe — payments, including your card details, which we never see.
• Resend — sending email: invitations, password resets and verification.
• Google — only if you choose to sign in with Google.
• Cloudflare — the spam check on the sign-up and contact forms.
• Komoot (Photon) — place search. What you type into a place box is sent to look it up.
• Open-Meteo — weather and place lookup. Receives coordinates, never your account details.
• Frankfurter — exchange rates. Receives currency codes only.

Nothing is sold, and nothing is shared with advertisers. There are none.

Your holidays and your account are kept until you delete them. Rate-limit counters go within a day. Sign-in sessions expire after thirty days. Password reset links last an hour and verification links a week.

There is a delete button in Settings. Using it removes your name and email from your account record, deletes your password and any Google connection, signs you out everywhere, and deletes the holidays you own.

What it deliberately does not do is unpick you from other people’s holidays. If you were on a friend’s trip, the plans you added and your share of the money stay on their board, shown against “Deleted account”, because removing them would silently change what everyone else is owed. If you want that removed as well, email us and we will do it by hand.

Under UK data protection law you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, and ask for it in a portable format. Email hello@holidayboard.app and we will answer within one month.

If you are not happy with how we handle it you can complain to the Information Commissioner’s Office at ico.org.uk.

Holiday Board is not intended for under-16s and accounts should not be created for them.

If this page changes in a way that affects you, the date at the top changes and we will say so in the app. See also the terms of service.