Privacy policy

What we collect, and why

• When you send a request: your name, email address, dates, number of guests, and your message. Phone number if you choose to give one. We need it to pass the request to the host and to get back to you.
• When you book: the same details, plus the amount and payment status, so we can handle the payment and the payout to the host.
• If you are a host: name, email address, and the content of your listing, including the photos you upload.
• If you leave a review: the name you sign with and what you write.
• If you join the waiting list for an example listing: your email address and the area you are interested in.
• If you offer your place for rent: name, email address, phone number if you give one, and your description of the place.
• Aggregated visitor statistics: how many opened a listing and how many sent a request. These are counts only, with nothing that identifies you.
• A request also records a broad traffic source such as search, social media or campaign. We do not store the referring web address or use an extra tracking cookie for this.
• Recipients and prepared messages are temporarily kept in a mail queue so failed messages can be retried. The administrator can see delivery status and attempt counts.

What we do not do

• We never sell or rent out your data.
• There are no advertising cookies, no Facebook pixel, and no Google Analytics on this site.
• We never see your card details. They go straight to our payment provider.

Cookies and local storage

• A login cookie when you sign in as a host or administrator. It is required for the site to work and disappears when you sign out.
• Saved places are stored in your own browser, not with us. Clearing your browser data removes them.

Who else sees the data

Only those who need it to make the booking work:

• The host you send a request to, so they can answer you.
• Our email provider, which delivers the messages.
• Our payment provider, which handles the card payment.
• Our server and backup provider, where the data is stored.
• OpenStreetMap, which serves the map tiles on a listing page. Your browser fetches them directly, so they see your IP address. Listings without a pin load no map at all.
• We hand data to authorities only when the law requires it.

How long we keep it

• Mail queue: message content is cleared when the mail server accepts it or its validity expires (at most seven days, shorter for login links). Technical status records are removed after 30 days. Copies held by the mail provider and recipient are handled separately.
• Requests that never became a booking: until they are no longer needed, and we delete them sooner if you ask.
• Bookings and payments: seven years, because Swedish accounting law requires it. This is also why we cannot delete a completed booking on request.
• Published reviews: until you ask us to remove them.
• Waiting list and rental enquiries: until you ask us to remove them, or until they are no longer relevant.

Your rights

You have the right to know what we hold about you, to have errors corrected, to have data deleted where we are not required to keep it, and to object to our processing.

Write to cskarberg@gmail.com and you will hear from us within 30 days. If you think we handle your data incorrectly you can complain to the Swedish Authority for Privacy Protection (IMY).

Where the data is stored

On servers in the EU, with continuous backup to object storage in the same region. Choosing an EU region for both is a requirement in our own deployment instructions, not a preference.

Access is limited to the person who runs Junihus.