Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: Your email address when you create an account.
• Usage data: Saved cruises, saved searches, and price alert preferences you configure within your account.
• Technical data: IP address, browser type, device information, and page visit data collected automatically by our hosting provider (Cloudflare).
• Advertising attribution data: When you arrive from one of our Meta ads, we may collect the Meta click identifier, landing page, and related campaign attribution information.

2. How We Use Your Information

• To provide and operate the cruise search service, including your saved cruises and searches.
• To send price alert notifications that you have opted into.
• To email you about new sailings that match a saved search, when you turn that on (Pro).
• To manage your account and subscription.
• To analyze site usage and improve performance.
• To measure advertising performance and understand whether an ad visit results in an account, saved search, price alert, or Pro subscription.

3. Payment Processing

Payments for CruiseLookup Pro subscriptions are processed by Stripe. We do not store your credit card number, payment card details, or banking information on our servers. All payment data is handled directly by Stripe in accordance with their privacy policy.

4. Cookies

We use a limited number of first-party cookies:

• Session cookies: To keep you signed in to your account.
• Analytics preferences and storage: We remember your analytics choice for 180 days in local storage. Only if you allow it do we also store a random browser identifier for up to 180 days to recognize return visits, and session information shared between tabs. Sessions end after 30 minutes without a tracked action or after 24 hours. If you do not allow it, no analytics identifier is stored; we keep only your choice.
• Security cookies: Set by Cloudflare for bot protection and site security.
• Advertising attribution cookie: When you arrive from a Meta ad, we store a first-party, HttpOnly cookie so the visit can be associated with a later account action. It expires after 90 days.

We do not load the Meta Pixel or set third-party Meta cookies. Advertising conversion events are sent from our server through Meta's Conversions API.

Product Analytics Choices

We count visits anonymously to understand which pages are useful and how people find us. For this we record page paths, selected actions (such as opening an offer, signing up, creating a price alert or clicking through to book), and, on the first page you open in a tab or after a reload, the website you came from (its domain only, such as google.com) and any campaign tags in the link. Without your permission, these events use a random identifier that exists only while the page is open and is never stored on your device, so separate visits cannot be linked. If you choose Allow in Analytics preferences, we also remember this browser for up to 180 days so we can see return visits. You can change this at any time using Analytics preferences at the bottom of any page; choosing No thanks or Stop remembering clears the stored identifiers.

We honor Global Privacy Control and Do Not Track: when your browser sends either signal, we send no product analytics at all. We do not send account emails, login tokens, visitor IP addresses, full referring URLs or URL query strings to Amplitude, and we do not record sessions or automatically capture form contents. These choices apply to product analytics; the separate advertising measurement described above is unchanged.

We retain historical product analytics collected before this change. History transferred from PostHog to Amplitude uses separate browser identifiers and is not linked to newer visits.

5. Third-Party Links

CruiseLookup contains links to third-party cruise line and booking partner websites. When you click a booking link, you leave our site and are subject to the privacy policy of the destination website. We are not responsible for the privacy practices of these external sites.

6. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your data may be shared with the following service providers solely for the purpose of operating the Service:

• Stripe: For payment processing of Pro subscriptions.
• Cloudflare: For website hosting, security, and performance.
• Amplitude (EU): For product analytics as described above, delivered through our Cloudflare relay.
• PostHog: Retained historical product analytics during our migration to Amplitude.
• Meta: For server-side measurement and optimization of our Facebook and Instagram advertising. Contact information sent for matching is normalized and hashed before transmission.

7. Data Retention & Deletion

Your account data is retained while your account is active. If you wish to delete your account and associated data, please contact us at support@cruiselookup.com. We will process deletion requests within 30 days.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data.
• Update your information through your account settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the Service after any changes constitutes acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy, please contact us at support@cruiselookup.com.