Privacy Policy

Data controller

The data controller is STOCK OUT LLC (Albuquerque, New Mexico, United States), publisher of the Voooya service. Contact: contact@voooya.com.

Data we collect

We only collect the data needed to operate the service:

• Account: email address, name and, where applicable, profile photo. If you sign in through Google, Apple or Facebook, we receive your email, name and profile photo from that provider — nothing else.
• Password: if you create an account with an email address, your password is stored in encrypted (hashed) form; we never have access to it in plain text.
• Activity on the service: the favorites and lists you save, so that we can show them to you again.
• Technical data: a strictly necessary session cookie to keep you signed in.

Purposes

Your data is used to: create and secure your account, sign you in, remember your favorites and allow you to book activities. We do not sell your data and do not use it for advertising purposes.

Sharing with third parties

Activities, prices, availability and booking are provided by Viator (Tripadvisor); when you book, the information needed for the booking is sent to Viator. Social sign-in relies on Google, Apple or Facebook, depending on your choice. Google Analytics tracking, if you consent to it, is described below. We do not share any data beyond what is strictly necessary for these services.

Google Analytics and your cookie choices

If you accept audience measurement, Google Analytics uses cookies to measure visits, public pages viewed, clicks to Viator and the bookings that result from them. These statistics help us understand which channels bring in visitors and improve the site. A click to Viator indicates an intent, not a confirmed booking. Once you consent, a random identifier is added to the Viator link. It allows us to match a confirmation or cancellation received from Viator to your Analytics visit. This match is kept for a maximum of 180 days, within the limits of your consent, and new transmissions stop when you withdraw your consent on this browser. We only send measurement identifiers, a pseudonymized transaction reference, the activity code, the event type and its date. We do not send your name, your email address, your messages or any information entered in forms to this tracking. Advertising features are disabled.

The Google Analytics tag is loaded only after you consent. You can decline or withdraw your consent using the “Cookies” button on public pages. Your choice is remembered for 180 days; Analytics cookies are set to expire after 180 days with no automatic extension. Google processes measurement data, including technical information about your device and cookie identifiers, in accordance with its own terms. See Google's privacy policy.

Retention

Your account data is kept for as long as your account exists. Sessions expire automatically after 30 days of inactivity. You can request the deletion of your account at any time (see below).

Your rights

In accordance with the GDPR, you have the right to access, rectify, erase and port your data. To exercise these rights, write to contact@voooya.com. To delete your account and your data, see our Data Deletion page.