Privacy notice

Last updated: 15 November 2026. This describes the shipped InnYora website implementation, not any later integrations.

Information processed

Choosing a destination and map radius sends those two selections to our Cloudflare-hosted application endpoint. Our server requests tagged accommodation and amenity map data from the Overpass service. The result contains location and place information, not your personal identity. We do not require an InnYora account or collect payment-card details.

Check-in and check-out dates and guest count are processed in your browser for onward booking-provider searches. If you click an outbound booking link, the destination site receives information in the link and is governed by its own privacy notice.

Saved stays, priority selections and preferences are kept in browser localStorage. You can remove them by clearing this site's browser data. Our code does not transmit those saved preferences to an analytics endpoint.

Optional hosted AI

The natural-language preference feature uses local keyword rules by default. If you tick the hosted-AI consent checkbox, the text you enter is transmitted to InnYora's Cloudflare Pages Function and Cloudflare Workers AI for processing, if the service has been configured. Do not enter sensitive personal data. No hosted AI request occurs unless you opt in.

Hosting and third parties

Cloudflare delivers the website and may process network metadata and security logs under its own applicable terms. The map uses OpenStreetMap tile servers and the interface loads the Leaflet library from unpkg.com; those providers may receive your IP address and browser network metadata. OpenStreetMap data originates from its contributors. We do not install nonessential tracking cookies or an advertising analytics SDK in this release.

Lawful basis and your rights

Technical requests are necessary to serve the discovery you request. Where optional hosted AI is used, we request affirmative consent at the point of use. EU/EEA visitors may have rights to access, rectification, erasure, restriction and objection where applicable, as well as to lodge a complaint with their data protection authority.

Contact / controller

Launch requirement: fill in the actual legal operator/controller name, business address, contact email and any required processor/transfer details before accepting public users. This text is not legal advice or a substitute for review of your actual deployment and vendor arrangements.

Updates

We will update this notice if we add analytics, accounts, subscriptions or new data providers. Return to InnYora.