Privacy Policy

Last updated: July 2026

1. Who we are

Hotels.Video is operated as an editorial directory of hotels. Contact for privacy matters: legal@hotels.video.

2. What we collect

• Account data: name, email address and a hashed password when you register.
• Reviews and ratings you submit, associated with your account and the hotel.
• Server logs: IP address, browser user agent, timestamps of requests, for security and debugging (retained up to 30 days).
• Cookies: a single session cookie to keep you signed in. No advertising or analytics cookies are set by us.

3. Embedded YouTube content

Video pages on this site embed videos from YouTube. We use YouTube's privacy-enhanced embed domain (youtube-nocookie.com), which does not set tracking cookies until you actually press play. Once you interact with a video, YouTube (Google) may set cookies and collect data as described in Google's Privacy Policy. We do not receive any personally-identifiable information from those interactions.

4. YouTube API

To fetch public metadata about hotel videos (title, channel name, view count, comment count), our servers query the YouTube Data API v3. These queries are made server-to-server and do not involve your personal data. Use of YouTube API Services on this site is governed by the YouTube API Services Terms and Google Privacy Policy.

5. How we use your data

• To operate your account and moderate your reviews.
• To protect the site from abuse (rate limits, spam detection).
• To respond to takedown / support / copyright requests.

We do not sell your data, and we do not send marketing emails.

6. Your rights

You may request a copy of your data, correction of your data, or deletion of your account at any time by emailing legal@hotels.video. Under GDPR / UK GDPR / DPDP (India), you may also lodge a complaint with your local data-protection authority.

7. Data retention

Account data is kept for as long as your account exists. Server logs are retained up to 30 days. Deleted-review records are purged within 30 days of deletion.

8. Security

Passwords are hashed with PHP's password_hash() (bcrypt/argon2). All database queries use prepared statements. Traffic to the site is served over HTTPS.

9. Changes

We may update this policy. Substantive changes are announced on the home page for 30 days after they take effect.