Privacy Policy

Who we are

HotelUpgrades is a community website, operated from the Czech Republic, where travelers share hotel upgrade reports. For the purposes of data-protection law, the operator of HotelUpgrades is the data controller for the personal data described here.

You can reach us at any time through our contact form.

What we collect

We collect only what we need to run the Service:

• Account information — your email address, a username, and an optional profile photo. If you sign in with Google, we receive basic account details from Google to set up your account.
• Content you submit — your reports (loyalty status, the rooms you booked and received, dates of stay, perks and comments), any photos you upload, and your votes and comments.
• Contact messages — if you use the contact form, the name, email and message you provide, plus your IP address, which we use only to prevent spam and abuse.
• Technical data — essential cookies that keep you signed in, and basic security logs.

Why we use it, and our legal basis

We use your data to provide the Service and your account (to perform our agreement with you), to keep the Service secure and prevent abuse (our legitimate interest), and to respond to messages you send us (our legitimate interest, or your consent).

We do not sell your personal data, and we do not use it for advertising.

What is public and what is not

Your username and the reports, comments, votes and photos you post are public and visible to other visitors. Your email address is never shown publicly.

Service providers we rely on

We use trusted providers that process data on our behalf to run the Service: Supabase (database, accounts and photo storage), Vercel (website hosting) and Resend (sending contact-form emails). If you choose to sign in with Google, Google processes your sign-in. These providers may process data outside the Czech Republic.

How long we keep it

We keep your account and content for as long as your account exists. You can delete your own reports at any time from the Service. To delete your whole account and the data associated with it, contact us and we will remove it.

Your rights

Under data-protection law you have the right to:

• access the personal data we hold about you;
• have it corrected if it is wrong;
• have it deleted;
• restrict or object to certain processing;
• receive a copy of it in a portable format;
• withdraw your consent where our processing is based on consent.

Exercising your rights and complaints

To exercise any of these rights, contact us through the contact form. You also have the right to lodge a complaint with the Czech data-protection authority (Úřad pro ochranu osobních údajů).

Children

The Service is not intended for children under 16, and we do not knowingly collect their personal data.

Cookies

We use only essential cookies. You can read more in our Cookie Policy.

Changes and contact

We may update this policy from time to time; the latest date is shown at the top of this page. If you have any questions, please get in touch through our contact form.