Privacy policy

A quick overview

This Privacy Policy applies to vocastay.com and the VocaStay comparison service. VocaStay, located at 500 108th Ave NE, Bellevue, Washington 98004, is responsible for the information described in this policy.

A booking provider's privacy policy applies after you visit or transact with that provider. We do not control how a third-party provider processes information on its own website.

The data points behind a search

Choices you put into VocaStay

We process the destination, map area, check-in and check-out dates, number of travelers, accommodation type, filters, sort selection, and similar search choices you submit. When a child's age is included in a search, we use it to request an appropriate travel result, not to identify the child.

How the comparison is used

We collect limited information about pages viewed, searches started, qualified page engagement, and outbound deal links selected. This may include the landing page, market, provider, quote identifier, destination website, date and time, and a salted hash derived from a random browser-session identifier. We do not store the original session identifier in our analytics database.

Technical signals

Our servers and infrastructure providers may process standard technical information such as IP address, browser and device type, operating system, request headers, referring URL, and security or diagnostic logs. Map and tile services may receive your IP address and browser information when your browser requests map content.

Things you send us directly

If you contact us by mail or another channel we make available, we process the contents of your communication and the information needed to respond.

Why we process those data points

We use information to:

• return matching accommodation results and maintain search and map features;
• send you to the provider offer you select;
• measure whether pages, searches, and provider links are useful;
• maintain, secure, debug, and improve the Service;
• prevent fraud, abuse, and security incidents; and
• comply with law and enforce our Terms of Use.

Where applicable law requires a legal basis, we rely on performance of our agreement with you, our legitimate interests in operating and improving a secure comparison service, compliance with legal obligations, and consent where required.

Who helps VocaStay operate

We may disclose information in the following circumstances:

• Service providers. Vendors that support hosting, databases, infrastructure, search functionality, security, and site operations may process information on our behalf.
• Search and map providers. Search requests may be processed through travel inventory services. OpenStreetMap and OpenFreeMap resources help display maps.
• Booking providers. When you select a deal, your browser opens the provider's site. The link may identify VocaStay as the referral source and include offer or affiliate parameters. The provider then processes your visit under its own privacy policy.
• Legal and safety reasons. We may disclose information if reasonably necessary to comply with law, protect rights or safety, investigate misuse, or respond to lawful process.
• Business transfers. Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

No data-broker business model

VocaStay does not sell personal information for money and does not use personal information for cross-context behavioral advertising. We do not intentionally place third-party advertising pixels on the Service. We may receive an affiliate commission after you select or book through certain provider links; see our Affiliate Disclosure.

How long information stays

VocaStay analytics records for page visits, qualified engagement, searches, and outbound provider clicks are configured to expire after 90 days. Browser session-storage entries generally remain only for the current tab or browsing session. Operational, security, backup, and legal records may be retained for different periods when reasonably necessary for the purposes described above.

Your controls and privacy rights

You can clear or block browser storage through your browser settings. Depending on where you live, you may also have rights to request access, correction, deletion, or a copy of personal information, or to object to or restrict certain processing. You may send a request to the postal address below. We may need information to verify your identity and authority to make the request.

Browsers may transmit a Do Not Track signal. Because there is no uniform standard for that signal, the Service does not currently change its behavior in response to Do Not Track. Because we do not sell personal information or use it for cross-context behavioral advertising, Global Privacy Control does not currently change site behavior. We will apply legally required opt-out preference signals if our practices change.

Travel searches involving children

The Service is intended for adults and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Traveler ages entered by an adult are used only as search criteria to find suitable offers.

Security and processing locations

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No internet service can guarantee absolute security. VocaStay is based in the United States, and information may be processed in the United States or other countries where our service providers operate.

When this explanation changes

We may update this policy as the Service or law changes. We will post the revised policy here and update the date at the top.

Send VocaStay a privacy request

Questions and privacy requests may be sent by mail to: