Privacy Policy
Updated October 18, 2026
Who is responsible
Sweet Cabin, operated by Andrei Shesternev in Campton, New Hampshire, uses personal information to arrange and manage cabin stays. Contact camptoncabin@gmail.com for privacy questions, access, correction or deletion requests.
Information we use
We collect the primary guest’s name and contact details, stay dates, guest count, booking choices, payment and refund records, signed agreements, signing evidence and identity-verification outcomes. Essential cookies, private access tokens and browser session storage support booking continuity, authentication and security. We also process limited technical information to protect the website and investigate problems.
Payments and identity verification
Stripe processes card payments and identity checks. Our website does not store full card numbers, ID images or dates of birth. It briefly reads verified name and date-of-birth information to check the primary guest’s name and minimum age of 25, and retains the outcome, date and provider reference. Stripe holds the identity documents; authorized Sweet Cabin users may review them in Stripe when necessary. Please do not email ID copies to us. Stripe also processes some information for its own purposes under its privacy policy at https://stripe.com/privacy.
How information is used and shared
We use information to provide requested booking services, verify eligibility, sign agreements, collect authorized payments, send booking messages, provide support, prevent fraud and meet legal obligations. Cloudflare hosts the website and booking records; Stripe handles payments and verification; Google/Gmail delivers and stores booking correspondence and attachments. These providers may process information outside your country. We may share relevant information with professional advisers, insurers or authorities when necessary for a claim or legal obligation. We do not sell guest personal information or use it for cross-context behavioral advertising. Promotional emails require a separate opt-in.
Identity document retention
We request redaction of Stripe-held identity documents 30 days after checkout or cancellation. For an unfinished booking, we request redaction after 30 days of inactivity. Stripe’s deletion process can take up to four additional days. Earlier deletion may apply where required by law. We keep the verification outcome and reference with the booking record. Stripe may retain information separately for its own legal purposes.
Booking and other retention periods
We retain signed agreements, essential booking details, payment/refund records, verification outcomes and related signing evidence for seven years after the calendar year of checkout or cancellation. Unfinished bookings and unsigned drafts are deleted after 30 days of inactivity; a signed agreement or payment record may need longer retention even if the stay does not proceed. Routine correspondence is retained for one year after checkout; messages documenting contractual changes or claims follow the booking-record schedule. Routine application security logs are retained for up to 90 days. Relevant records may be kept longer for a specific unresolved dispute, investigation or legal obligation. These periods may be shortened where law requires.
Deletion and backups
We use scheduled website cleanup and Stripe redaction, alongside owner-managed cleanup of Gmail, downloaded documents and other copies. Deletion from the active website does not instantly erase provider backups. Residual backup copies expire according to the provider’s backup cycle and are not used for ordinary business purposes. If a backup is restored, applicable deletions must be reapplied. Payment providers may retain records they independently need for legal obligations.
Your choices and requests
Email camptoncabin@gmail.com to request access, correction or deletion, or to ask about other rights available under applicable law. We aim to respond within 30 days, subject to applicable deadlines. We may verify your identity through existing booking details or a secure method; do not send an ID image by email. We will explain any information we must retain and why. You may unsubscribe from promotional messages without affecting necessary booking communications. Where applicable, you may appeal a decision by replying to our response or contact the relevant privacy regulator.
Security and updates
We restrict administrative access and use technical safeguards to protect guest information. No system can guarantee absolute security. This notice may be updated when our practices change; the current version and date appear on this page.