Privacy

This page describes what the operator of pholidays.com collects, and why.

What we collect

Your email address, to sign you in and to link your payment to your account.
Sign-in sessions, so you stay signed in.
Your IP address, used for rate limiting.
The number of API requests per Customer, to apply your Plan quota.
Your Client keys, stored only as a SHA-256 hash. We cannot read a key back.

Payments

Payments are handled by Paddle, the Merchant of Record. We never see your card details. Paddle shares your email and subscription status with us so we can set up your Plan.

Hosting and tracking

The site and API run on Cloudflare.
We do not sell your data.
We use no advertising trackers.

Contact

Email support@pholidays.com with questions about what we collect.