← Back to Guest Guide

Privacy Policy

Last updated: February 21, 2026

1. Who We Are

Guest Guide ("we," "us," or "our") operates Guest Guide, a web application that helps property hosts create and manage guest guides for their listings. We are based in Poland. For the purposes of the General Data Protection Regulation (GDPR), we are the data controller. You can contact us at contact@guestguide.cc.

2. Data We Collect

We collect the following categories of personal data:

  • Account data: Email address, full name, and password (stored as a secure hash). We collect this when you create an account. If you sign in with Google, we receive your name and email from Google.
  • Profile data: Information in your profile, such as your name and email, which may be updated over time.
  • Property and guide content: Information you add to create property guides, including property names, addresses, check-in/check-out times, arrival instructions, WiFi passwords, door codes, amenity descriptions, and images. This content may include sensitive details; you are responsible for only sharing guides with intended guests.
  • Share session data: When you create time-limited share links for guests, we store the link code, validity period (start and end dates), and whether a guest indicated they have arrived ("I'm in"). Guests can view guides via these links without creating an account; we do not collect personal data from guests.
  • Feedback: When you submit feedback through our feedback forms (e.g., product opinions or feature requests), we store your response to improve our service.
  • Usage and technical data: Cookies and similar technologies (see Section 8) used for authentication, language preferences, and interface settings.

3. How We Use Your Data

We use your data to:

  • Create and manage your account.
  • Provide the Guest Guide service, including creating, editing, and publishing property guides.
  • Generate time-limited share links so you can safely share guides with guests.
  • Send guest arrival notifications to you (the host) when a guest taps "I'm in" on a shared guide.
  • Translate guide content into other languages when you or your guests use translation features.
  • Improve our product using your feedback.
  • Comply with legal obligations and protect our rights.

Under the GDPR, we rely on: (a) contract performance to provide the service; (b) legitimate interest for improving the product and ensuring security; and (c) consent where we explicitly ask for it (e.g., optional feedback or marketing).

4. Third-Party Processors

We use trusted third parties to run the service:

  • Supabase: Authentication and database hosting. Supabase may process data in the EU or US. See their Data Processing Addendum.
  • Resend: Transactional email delivery, including guest arrival notifications sent to hosts when a guest indicates they have arrived. Resend processes recipient email addresses and message content. See Resend's Data Processing Addendum.
  • Google Cloud Translation: We send guide text to Google's translation API so guests can view guides in their preferred language. Google processes this data briefly in memory and does not use it for other purposes. See Google's data usage FAQ.
  • Google Sign-In: If you use "Sign in with Google," we receive your name and email from Google to create and manage your account. Google's authentication and data practices are governed by their Privacy Policy.
  • QR code services: We may send guide URLs to third-party QR code generators (e.g., api.qrserver.com) to create QR codes.
  • Analytics: We may use analytics tools (e.g., Google Analytics) to understand how the service is used. Such tools may set cookies and process usage data. Where required (e.g., in the EU), we will obtain your consent before using non-essential analytics cookies.

5. Data Retention

  • Account and profile data: Retained until you delete your account.
  • Property and guide content: Retained until you delete it or close your account.
  • Share session data: Session codes, validity windows, and arrival notification timestamps are retained until the session expires or you delete the share link.
  • Feedback: Retained for up to 2 years, or until you request deletion, whichever is earlier.
  • Cookies: See Section 8 for cookie lifetimes.

6. Your Rights (GDPR)

If you are in the European Economic Area, UK, or Switzerland, you have the right to:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate data.
  • Erasure: Request deletion of your data ("right to be forgotten").
  • Portability: Receive your data in a structured, machine-readable format.
  • Restriction: Limit how we process your data in certain circumstances.
  • Object: Object to processing based on legitimate interests.
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at contact@guestguide.cc. You also have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO).

7. California Consumers (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected.
  • Right to delete: You may request deletion of your personal information.
  • Right to correct: You may request correction of inaccurate personal information.
  • Right to opt out of sale: We do not sell your personal information. We do not share it with third parties for advertising or cross-context behavioral advertising.

To submit a request, contact us at contact@guestguide.cc. We will not discriminate against you for exercising your rights.

8. Cookies

We use the following cookies:

  • Supabase auth cookies: Required for authentication and session management. Essential for the service.
  • guide-lang: Stores your preferred language for viewing guides. Expires in 1 year.
  • sidebar:state: Stores sidebar expand/collapse preference. Expires in 7 days.

If we add analytics or other non-essential cookies, we will update this policy and, where required by law, obtain your consent before using them.

9. International Transfers

Your data may be processed in the European Union or in other countries where our service providers operate (e.g., the United States). When we transfer data outside the EEA, we rely on adequacy decisions, Standard Contractual Clauses, or other lawful mechanisms to ensure your data receives adequate protection.

10. Children

Guest Guide is not intended for users under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us at contact@guestguide.cc and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. For material changes, we may provide additional notice. Continued use of Guest Guide after changes constitutes acceptance of the updated policy, except where we are required by law to obtain your consent again.

12. Contact

For privacy-related questions or requests, contact us at contact@guestguide.cc.