1. Who we are
BookOrSkip (“we”, “us”) operates bookorskip.com, an independent platform for honest accommodation reviews. For privacy questions, contact us at [email protected].
2. What we collect
When you browse without an account
- Basic technical data (IP address, browser type, pages viewed) via server logs and, if enabled, Google Analytics.
- Security signals processed by Cloudflare Turnstile when you paste a listing link or submit a form.
When you create an account
- Email address and a password (stored hashed), or Google OAuth profile data.
- A public display name (pseudonym) — never your legal name.
- An optional avatar URL if you sign in with Google.
- Session cookies (httpOnly JWT) to keep you signed in.
When you write a review
- Your ratings, title, review text, stay date, and optional photos.
- Optional private stay proof (e.g. booking confirmation) used only to verify your stay — never shown to hosts or other users.
Browser extension
Our Chrome extension reads the URL of supported booking pages you visit and requests the BookOrSkip score from our servers. It does not read your passwords, payment details, or messages on those sites.
3. How we use your data
- Provide and improve the BookOrSkip service.
- Publish reviews under your display name — not your real name.
- Moderate content and prevent abuse or fake reviews.
- Secure the platform (Turnstile, rate limiting, fraud detection).
- Send service-related emails (e.g. account or moderation notices).
- Analyze aggregated usage to improve the product.
We do not sell your personal data. We do not share your identity with hosts, property owners, or booking platforms.
4. Legal bases (EEA/UK users)
Where GDPR applies, we rely on:
- Contract — to create your account and publish reviews you submit.
- Legitimate interests — security, analytics, moderation, and improving the service.
- Consent — non-essential cookies and optional marketing emails (when offered).
- Legal obligation — when required to retain or disclose data by law.
5. Third-party services
We use trusted processors, including:
- Google (OAuth sign-in, Places API for property data, Analytics).
- Cloudflare (Turnstile bot protection, R2 photo storage).
- Hosting and database providers that run our infrastructure.
Each processor handles data only as needed to provide their service. See our Cookie Policy for more detail.
6. Retention
- Account data is kept while your account is active.
- Published reviews may remain after account deletion to preserve community trust, but will be anonymized where possible.
- Server logs and analytics data are retained for a limited period.
7. Your rights
Depending on where you live, you may have the right to:
- Access, correct, or delete your personal data.
- Export your data in a portable format.
- Object to or restrict certain processing.
- Withdraw consent where processing is consent-based.
- Lodge a complaint with your local data protection authority.
To exercise these rights, email [email protected]. We respond within 30 days.
8. Children
BookOrSkip is not directed at children under 16. We do not knowingly collect data from children. Contact us if you believe a child has provided personal data.
9. International transfers
Your data may be processed in countries outside your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.
10. Changes
We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use after changes means you accept the revised policy.
General questions: [email protected].