Privacy Policy

Last updated May 29, 2026

This Privacy Policy explains how HotelDip (“HotelDip,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use hoteldip.com and related services (the “Service”). HotelDip is a free, flexible-date hotel price calendar funded by affiliate booking links. By using the Service you agree to this policy. Questions or requests? Email support@hoteldip.com.

Who we are

HotelDip is the controller of the personal information described here. For any privacy question, or to exercise your rights, contact us at support@hoteldip.com.

Information we collect

Account information. When you create an account, our authentication provider (Clerk) stores your email address and a user identifier. We never see or store your password.
Your activity. The saved searches and price-drop alerts you create while signed in, including the city, hotel class, dates, filters, and thresholds you choose.
Email records. A log of the transactional emails we send you (such as price-drop alerts), including delivery status, for sending, troubleshooting, and abuse prevention.
Destination searches. When you use destination autocomplete, the text you type is sent to Google Maps Platform to return place suggestions. We do not store your keystrokes; we store only a destination you select in order to build its calendar.
Technical and usage data. Standard request information such as IP address, approximate location derived from it, browser/user-agent, timestamps, and pages requested, used for security, rate limiting, and reliability.
Cookies and similar technologies. See our Cookie Policy.

You can browse and search HotelDip without an account. Account features (saving searches, setting alerts) require the information above.

How we use your information

To provide the Service: show price calendars, save your searches, and send the alerts you request.
To send transactional email you have asked for, such as price-drop notifications.
To keep the Service secure, prevent fraud and abuse, and enforce rate limits.
To maintain, debug, and improve the Service.
To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Legal bases (EEA and UK)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide account features you request); our legitimate interests (to secure, operate, and improve the Service); your consent (where required, for example certain cookies); and compliance with legal obligations.

Service providers and recipients

We share personal information only with providers that help us run the Service:

Clerk: authentication and account management.
Resend: sending transactional email.
DigitalOcean: application hosting and database.
Vercel: frontend hosting and delivery.
Cloudflare: DNS and content delivery.
Google Maps Platform: destination autocomplete suggestions.
Travelpayouts / Hotellook: hotel price data and affiliate booking links.

These providers process data on our behalf under their own terms and security commitments. We may also disclose information if required by law, to protect our rights or users, or in connection with a corporate transaction such as a merger or acquisition.

Affiliate links

When you click a “Book” link, we may pass an affiliate identifier to the booking partner so a resulting booking can be attributed to us. This is how the free Service is funded and does not change the price you pay. See the Cookie Policy for details.

International data transfers

Our providers may process data in countries other than yours, including the United States. Where required, such transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Data retention

We keep personal information only as long as needed for the purposes above. Saved searches and alerts are kept until you delete them. When you delete your account, we delete your personal data within 30 days, except limited records we must retain for security, fraud prevention, or legal compliance. Aggregated or de-identified data that cannot identify you may be kept longer.

Your rights and choices

Delete saved searches and alerts at any time from your account.
Unsubscribe from alert emails using the link in any alert email.
Request access to, correction of, export of, or deletion of your personal data.
Object to or restrict certain processing, and withdraw consent where processing is based on it.

Depending on where you live (for example the EEA, UK, or California), you may have additional rights, including the right not to receive discriminatory treatment for exercising them, and the right to lodge a complaint with your local data protection authority. To exercise any right, email support@hoteldip.com; we may need to verify your identity before acting.

Security

We use technical and organizational measures to protect personal information, including encryption in transit (HTTPS), scoped access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children’s privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

Do Not Track and Global Privacy Control

We do not run cross-site tracking or targeted advertising, so we do not respond differently to Do Not Track or Global Privacy Control signals. If this changes, we will update this policy.

Third-party sites

Booking partners and other linked sites have their own privacy policies. We are not responsible for their practices; please review their policies before providing information.

Changes to this policy

We may update this policy as the Service evolves or the law changes. We will revise the “last updated” date above and, for material changes, provide a more prominent notice where appropriate.

Contact us

Email support@hoteldip.com with any privacy question or request.