Add to Chrome
Legal stuff, made readable

Privacy Policy

Ninjas are good at staying invisible. Your personal data stays out of it too. Here’s the plain-English version first, then the full policy.

The short version

  • The extension needs no account. It never asks for your name, email or phone number.
  • We never collect your payment details. You pay on the booking site.
  • The extension uses anonymous usage analytics (Mixpanel) that can’t identify you.
  • Website analytics and ad pixels run only if you click “Accept” on the cookie banner.
  • If you write to us, we use your name and email only to reply.
  • We don’t sell, rent or trade data to data brokers.
  • You can ask us to see or delete your data at any time.
  • Hotel Ninja is run from Spain, so EU privacy law (GDPR) applies.

This summary is here to help. The full policy below is the official version.

Last updated:

This Privacy Policy describes Our policies and procedures for the collection, use, and disclosure of data when You use Our Service, and the rights You have over that data.

The Hotel Ninja browser extension does not ask for, collect, or store personal information. It uses anonymous analytics to keep the Service working well. Our Website collects limited personal data only in two cases: when You accept analytics and advertising cookies, and when You contact Us. This policy explains both.

Who We Are

The data controller responsible for Your data is:

  • Rony Perez, a self-employed professional (autónomo) registered in Spain, trading as Hotel Ninja
  • Address: Sant Eduard 2, 08172 Sant Cugat del Vallès (Barcelona), Spain
  • Email: contact [at] hotel-ninja.com

For any privacy question or request, write to the email above or use Our contact form.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in the singular or in the plural.

Definitions

For the purposes of this Privacy Policy:

  • Application refers to Hotel Ninja, the software browser extension program provided by the Company.
  • Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to Hotel Ninja, the trading name of Rony Perez, a self-employed professional based in Spain (see “Who We Are”).
  • Cookies are small data files placed on Your device by a website or by the Application to store basic usage information.
  • Device means any device that can access the Service, such as a computer, laptop, or tablet.
  • Personal Data is any information relating to an identified or identifiable individual, as defined in the EU General Data Protection Regulation (GDPR).
  • Service refers to the Application (Browser Extension) or the Website, or both.
  • Usage Data refers to data collected automatically, either generated by using the Service or from the Service infrastructure itself (for example, the duration of a feature use).
  • Website refers to Hotel Ninja, accessible from hotel-ninja.com
  • You means the individual accessing or using the Service.

How Data Flows: Website and Extension

Our data practices are split between two separate channels: the Website and the Browser Extension.

1. Website Analytics and Advertising (Consent Only)

Our Website uses Google Analytics, the Meta (Facebook) Pixel and the Meta Conversions API to understand how visitors use the Website and to measure Our advertising.

  • Strict opt-in rule: These tools are blocked by a consent banner. They do not run, and no analytics or advertising cookies are set, unless You choose “Accept” on the consent prompt.
  • What they collect if You accept: Your IP address, cookie identifiers, device and browser information, the pages You visit, and how You arrived at the Website. Under the GDPR, an IP address and cookie identifiers count as Personal Data.
  • Withdrawing consent: You can change Your choice at any time through the “Cookie settings” link at the bottom of every page, or by deleting Cookies in Your browser. Withdrawing consent does not affect processing that happened before.

2. Google reCAPTCHA

Our contact form is protected by Google reCAPTCHA v3, which helps Us block spam and automated abuse. reCAPTCHA collects hardware and software information, such as Your IP address, device and browser data, and how You interact with the page, and sends it to Google for analysis. Google’s Privacy Policy and Terms of Service apply to this processing.

3. Browser Extension: Anonymous Analytics Only

The Hotel Ninja Browser Extension operates independently from Our Website tracking.

  • No sign-up, no account: There is no registration or account system. The extension never requests, stores, or transmits names, email addresses, phone numbers, browsing histories, or payment details.
  • Anonymous app analytics: To monitor software stability and improve hotel lookups, the extension uses Mixpanel analytics and basic anonymous usage cookies. This data covers functional events (such as feature use or currency changes) in an aggregate, anonymized form and is not used to identify any individual. All hotel price matching runs locally inside Your browser.
  • Usage Data: This may include browser type and version, the booking sites checked by the extension, the time and date of searches, general location at country level (to show local currencies), and technical diagnostic data.

Contact Form and Email

If You contact Us through the contact form or by email, We collect the information You choose to send: Your name, email address, the topic You select, Your message, and any attachments or screenshots.

  • Why: Only to read and answer Your message, and to keep a record of the conversation in case You write again.
  • Where it is stored: Form messages are stored on Our Website hosting and delivered to Our email inbox. We do not add You to any mailing list.
  • Who sees it: Only the Hotel Ninja team.

Under the GDPR, We rely on the following legal bases:

  • Consent (Article 6(1)(a) GDPR): for Website analytics and advertising tools (Google Analytics, Meta Pixel and Meta Conversions API). You can withdraw consent at any time.
  • Legitimate interest (Article 6(1)(f) GDPR): for answering messages You send Us, for protecting the contact form from spam with reCAPTCHA, and for anonymous extension analytics, to the extent any of that data counts as Personal Data. Our interest is running a reliable, secure Service and replying to people who write to Us. You can object to this processing at any time (see “Your Rights”).

Retention of Data

  • Contact messages: kept so We can see earlier conversations if You write to Us again. We delete them when they are no longer needed for that, and at the latest 3 years after Our last exchange with You. You can ask Us to delete them sooner at any time.
  • Website analytics and advertising data: kept according to the retention settings of Google and Meta, and only for as long as needed to measure Website and advertising performance.
  • Extension analytics: anonymous, aggregated statistics kept in Mixpanel to monitor the stability of the Service. Because this data is not linked to Your identity, We do not keep historical logs about any individual.

We do not sell, rent, trade, or share any data with third-party data brokers.

Transfers Outside the European Union

Some of Our service providers, including Google (Analytics and reCAPTCHA), Meta and Mixpanel, are based in the United States, so data may be processed there. These transfers are covered by the EU-U.S. Data Privacy Framework, for providers certified under it, and by the European Commission’s Standard Contractual Clauses, which require providers to protect Your data to EU standards.

Your Rights

Under the GDPR and Spanish data protection law, You have the right to:

  • Access the Personal Data We hold about You
  • Correct data that is wrong or incomplete
  • Delete Your data
  • Restrict how We use Your data
  • Object to processing based on legitimate interest
  • Receive Your data in a portable format
  • Withdraw consent at any time, where processing is based on consent

To use any of these rights, write to contact [at] hotel-ninja.com. We will reply within one month. Because the extension does not collect data that identifies You, We may not be able to find extension data linked to You.

If You believe We have not handled Your data correctly, You can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es), or with the data protection authority in the EU country where You live.

Disclosure of Data

We share data only with the service providers named in this policy, which process it on Our behalf, and with public authorities when the law requires it, for example under a valid court order in Spain.

Children’s Privacy

Our Service is designed for adults booking travel and is not directed at children. We do not knowingly collect Personal Data from anyone under 14 years of age, the minimum age for consent under Spanish law. If You believe a child under 14 has sent Us Personal Data, contact Us and We will delete it.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will publish the new version on this page and update the “Last updated” date at the top. You are encouraged to review this policy periodically for any changes.

Questions about privacy? We’re happy to explain.

Contact us