Privacy policy

Summary

PlayaHolbox is a travel directory. We don’t sell your personal data and we don’t show behavioral ads. We collect the minimum information needed to run the site, improve the guides, and respond to messages.

What we collect

• Form submissions. When you use the contact form or submit a business claim, we store your name, email, phone/WhatsApp, and the message content in our own Postgres database so admins can respond. We do not share these fields with third parties.
• Server logs. Routine web-server logs record IP address, user agent, and the pages requested, for abuse detection and performance debugging. Logs rotate automatically.
• No account cookies. We don’t have user accounts. The admin dashboard uses one short-lived httpOnly cookie set only after a correct password login.

Third-party services

• Google Maps / Google Places. Business photos, ratings, and locations shown on PlayaHolbox come from the Google Maps Platform APIs. When you load a page that shows Google data, Google may receive your IP address and basic request metadata. Attribution is shown wherever Google data is displayed.
• Open-Meteo provides live weather + marine data for our live-conditions pages. No personally identifying data is sent.
• Vercel hosts the site. See Vercel’s privacy policy.
• Our own VPS hosts the Postgres database (business claims, overrides, contact messages, alerts) and the owner-uploaded photo store. Data never leaves infrastructure we control.

Analytics

We don’t run Google Analytics, Facebook pixels, or similar tracking. We may add privacy-first server-side analytics (e.g. counts of page views by route) in the future; if we do, this page will be updated and no personal data will be collected.

Your rights

Email info@playaholbox.com to request a copy or deletion of any form submissions you’ve made. We’ll respond within 30 days.

Children

PlayaHolbox is a general travel resource not directed at children under 13. We don’t knowingly collect data from minors.