Privacy policy

Introduction

This Privacy Policy describes how YoloWiz LLC (“we,” “us,” or “our”) collects, uses, and discloses your information when you visit or use YoloWiz at yolowiz.com (the “Site”). By accessing or using the Site, you agree to the terms of this Privacy Policy.

YoloWiz is a travel search and comparison service operated by YoloWiz LLC, a limited liability company registered in Iowa, United States. Bookings are completed on the websites of the travel providers we link to, not here.

Information you provide to us

• Account information. When you create an account, we collect your email address, an optional display name, and a hashed password. We never store passwords in a readable form.
• Communication data. When you contact us through our support page, we collect the information you provide, including your name, email address, and the content of your message.

We do not collect payment details. When you book, you leave the Site and transact with the travel provider directly under their own terms and privacy policy.

Information collected automatically

• Search history. Every search you run is logged so we can show price history later. Searches run while signed out are not linked to any person.
• Session data. When you sign in, we keep a session record containing your IP address and browser user agent. This is used only to detect stolen sessions and is deleted with the session.
• Usage data. We may collect information about how you access and use the Site, including pages viewed and the duration of your visit. Where analytics is enabled it is aggregate and cookieless, and does not follow you across other sites.

How we use your information

• To provide, operate, and maintain the Site and its services.
• To create and manage your account.
• To respond to your enquiries and provide support.
• To send you service-related communications, such as email verification and password resets.
• To monitor and analyse trends and usage of the Site.
• To detect, prevent, and address technical issues and security incidents.
• To improve the Site and its services.
• To comply with legal obligations.

How your information is shared

We share information in four narrow ways, and in no others. First, to answer your searches: the destination, dates and party size you enter are sent to the travel data providers who supply the results — that is how a search works — but never with your name, email address or account identity attached. Second, with the infrastructure that runs the Site (hosting, database, analytics and email delivery providers), which processes data on our behalf under their own contractual obligations. Third, if the law compels it — a valid legal demand we are required to honour. Fourth, if YoloWiz LLC is ever merged, acquired or sells its assets, the data described in this policy may transfer with the business, and this policy would continue to govern it until replaced with notice.

What we do not do

• We do not sell personal data to third parties.
• We do not build advertising profiles based on your personal information.
• We do not use your search history to change the prices you are shown.

Deleting your account

You can delete your account at any time. Deleting it removes your email address, name, and every sign-in method, and signs out all sessions immediately.

Search records are retained for price history with their link to your account removed. We keep them in that unlinked form rather than deleting them outright.

Cookies

YoloWiz sets two cookies, both only after you sign in. The first keeps you signed in and is httpOnly, so no page script can read it. The second records nothing but the fact that a session exists — it holds no identifier and no personal data, and it is readable by the page so that signed-out visitors are not asked to prove it on every page load.

Both are cleared when you sign out. Neither tracks your activity across other websites, and there are no advertising or third-party tracking cookies.

Separately from cookies, the Site stores some preferences in your browser’s own storage: your departure airport, your temperature unit, and — until you sign in — the dreams you build. This data stays on your device and is not transmitted to us, with one exception: when you sign in, your dreams sync to your account so they can follow you across devices. Clearing your browser’s site data removes all of it.

How long we keep information

Account information is kept until you delete your account. Session records are deleted with the session they protect. Search records are kept indefinitely for price history — linked to your account while you have one, and permanently unlinked from you when you delete it, as described above. Support correspondence is kept as long as needed to resolve the matter and meet our legal obligations.

Where your information is processed

The Site is operated from the United States and your information is processed on servers there. If you use the Site from outside the US — including the EEA and UK — your information travels to and is processed in the US, where privacy law differs from your home jurisdiction’s. The rights and commitments in this policy apply wherever you are.

Data security

We implement reasonable security measures to protect your personal information from unauthorised access, disclosure, alteration, and destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Third-party links

The Site contains links to third-party websites and services we do not operate, including the travel providers you book with. We have no control over and assume no responsibility for their content, privacy policies, or practices. We encourage you to review the privacy policy of any third-party site you visit.

Children's privacy

The Site is not intended for individuals under the age of 13, and we do not knowingly collect personal information from them. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will remove it.

Your rights in the European Economic Area (GDPR)

If you are a resident of the EEA, you have the right to:

• Access, update, or delete the information we hold about you.
• Have inaccurate information corrected.
• Object to our processing of your personal data.
• Request that we restrict processing.
• Receive your data in a portable form.
• Withdraw consent where processing relies on it.

To exercise any of these rights, contact us using the details below.

Where GDPR applies, our lawful bases are: performance of a contract, for the account you asked us to create and the service it unlocks; legitimate interests, for security records, fraud prevention and the aggregate price history that makes the service useful; and consent, for anything you opt into such as the launch newsletter — withdrawable at any time. You also have the right to lodge a complaint with your local supervisory authority.

Your rights in California (CCPA)

If you are a California resident, you have the right to:

• Know what personal information is collected.
• Know whether your personal information is sold or disclosed, and to whom.
• Decline the sale of your personal information — though as stated above, we do not sell it.
• Access your personal information.
• Receive equal service and pricing even if you exercise your privacy rights.

To exercise any of these rights, contact us using the details below.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the new policy on this page and update the “Last updated” date above. Please review it periodically.

Contact us

YoloWiz LLC is the data controller for the information described in this policy. Questions about this policy, your data, or your privacy rights can be sent to support@yolowiz.com or through our support page.