Privacy Policy

Information we collect and why

Account and authentication data. If you create an account, Amazon Cognito processes your email address, account identifier, email-verification status, and authentication records. Octivary stores the private saved content, decision templates, and contributor-terms acceptance you choose to save. We do not store account passwords in Octivary databases. We use this information to provide account and saved features, maintain security, and prevent misuse.

Newsletter data. If you request the newsletter, we collect your email address, consent version, date and source, and keep the request pending for manual handling. Older records may also contain first names and subscription, unsubscribe, bounce, or complaint actions. You may withdraw email consent by contacting us or using an unsubscribe link in an email you receive.

Google advertising and your choices

Google advertising scripts are temporarily disabled across Octivary. We have previously used Google AdSense on selected product guides and a Google Ads tag to measure advertising interactions. Google and its partners may use cookies, device identifiers, IP address, browser information, and similar technologies to serve and measure ads, limit fraud, and, where permitted, personalize advertising. Google may receive and process this information as an independent controller under its own policies.

When Google advertising is enabled, Google Privacy & messaging provides the advertising consent choices for visitors in the EEA, United Kingdom, Switzerland, and applicable United States jurisdictions. Its first layer offers consent, refusal, and options management where required. You can revisit or withdraw advertising choices through Google’s privacy message or revocation control when it is available. Our Site settings dialog does not control advertising consent.

To understand how Google uses information from sites that use its services, read How Google uses data when you use our partners’ sites or apps.

Cloudflare Web Analytics

Cloudflare Web Analytics is temporarily disabled. When enabled, it provides cookie-free, aggregate traffic and performance measurement. It records limited technical and usage information, such as page views, referrers, browser and device details, and performance metrics, so we can understand and improve the public site. We do not use it for advertising, account analytics, visitor profiles, or custom tracking events. It does not receive account data, private decision-template contents, health information, free-form text, email addresses, authentication tokens, or precise location.

Cloudflare Web Analytics is not controlled by Site settings because it does not use analytics cookies. Site settings controls only optional first-party display preferences.

Travel affiliate links and Travelpayouts

Octivary participates in the Travelpayouts affiliate program. Affiliate scripts are temporarily disabled. Outbound affiliate links may still lead to travel providers, and Octivary may receive a commission if you complete a qualifying booking or purchase. A commission does not change a Choice Compass ranking, editorial conclusion, or the comparison criteria.

When this technology loads or you use an affiliate link, Travelpayouts and the relevant travel provider may receive technical information such as your IP address, browser and device information, referrer, the page or link involved, and identifiers needed to attribute a referral. They may use cookies or similar technologies under their own policies. We do not receive your payment-card details or booking-account credentials through this program. Read the Travelpayouts Privacy Policy for its current practices and choices.

Cookies, identifiers, and sharing

Necessary cookies support security, authentication, core site features, and remembering your Site settings choice. Third parties may place or read cookies, use device identifiers or web beacons, and receive IP address or browser information when they provide advertising or analytics services. We share only the information needed for those services and do not sell account credentials, private saved content, or health information.

We use Amazon Web Services (AWS) to host and operate Octivary; Amazon Cognito for account identity and authentication; Amazon Simple Email Service (SES) for newsletters; and Travelpayouts for travel-affiliate link attribution. Google advertising and Cloudflare analytics scripts are currently disabled. These providers may process information in the United States and other countries where they or their subprocessors operate. AWS describes its commitments in its GDPR Center.

Retention

We retain account and saved-content records while your account is active and delete them following a verified deletion request, ordinarily within 30 days, except where longer retention is required to establish, exercise, or defend legal claims. Pending newsletter requests are kept for manual handling; newsletter records are kept while you remain subscribed. Consent, unsubscribe, bounce, and complaint evidence is retained for three years after unsubscribing or suppression. Optional aggregate analytics are retained for up to 395 days. Provider retention for Google and Cloudflare is governed by their own policies and settings.

Your privacy rights and requests

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of your personal information; to object to or restrict certain processing; and to withdraw consent. You may also have the right to complain to your local privacy regulator. Newsletter consent can be withdrawn through an email unsubscribe link.

To make a request, use our contact page and state the right you want to exercise, the email address associated with your account or subscription, and enough detail to locate the relevant data. We may ask for reasonable information to verify identity and authority before acting.

Security, children, and changes

We use reasonable technical and organizational measures designed to protect information, including access controls and managed cloud services. No internet service can guarantee absolute security. Octivary does not knowingly collect personal information from anyone under 18. If we learn that we collected personal information from someone under 18, we will delete it promptly.

We may update this policy when our practices or legal obligations change. We will post the updated policy here, revise the effective date, and provide additional notice when required.

Contact

For privacy questions or requests, email support@cozycabinops.com or use the contact page. CozyCabinOps is the operator of Octivary.

Effective date: September 28, 2026