Privacy Policy

ExploreDrop is operated by Explore Drop, LLC, which is the data controller for the personal information described in this policy.

1. What we collect

• Account data: your email address, optional name, and a hashed version of your password (we never store the password itself).
• Monitor data: the hotels, travel dates, and target prices you choose to track, plus the price history we collect for them.
• Billing data: subscriptions are processed by Stripe. We store your Stripe customer and subscription identifiers only — your card number never touches our servers.
• Technical logs: standard server logs (IP address, request time) kept briefly for security and debugging.

We do not collect anything else, and we never sell your data or show ads.

2. How we use it

To run the Service: checking rates for your monitors, sending you the alert and account emails you signed up for, processing subscription payments, and keeping the Service secure. That's it.

3. Email

Alert emails (price drops, availability) can be turned off anytime via the unsubscribe link in each email or from your Account page. Transactional emails — password resets, email verification, billing notices — are sent only when needed to operate your account.

4. Who processes data for us

• Stripe — subscription payments.
• Resend — email delivery.
• Railway — application hosting and database.
• Infrastructure providers — retrieval of publicly available rate information. Your personal data is never shared with them; they only see hotel codes and dates.

Each processor receives only what it needs to perform its function.

5. Retention and deletion

We keep your data for as long as your account exists. Deleting your account from the Account page immediately and permanently removes your account, monitors, and price history, and cancels any active subscription. You can also request deletion or a copy of your data by emailing us.

6. Security

Passwords are hashed with bcrypt, traffic is encrypted with TLS, and production data access is limited to the operator. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you.

7. Changes and contact

We'll announce material changes to this policy by email or in the app. Questions or data requests: support@exploredrop.com

ExploreDrop is an independent service and is not affiliated with Marriott International, Inc.