Privacy policy
Last updated: 28 September 2026
Holidaya has no accounts and doesn't ask for your details. Your leave plan stays on your device. Here is the little we do process, and why.
Who we are
The controller is Holidaya (holidaya.gr). For anything about your data, email info@holidaya.gr.
Your plan stays on your device
Your leave, switched-off holidays, own holidays, town, theme (light/dark) and cookie choice are stored only in your browser (localStorage). They are not sent to us. If you clear your browser data they are gone, and we cannot recover them.
When you share a plan, it is packed into the part of the link after the #, which browsers don't send to the server. Anyone with the link can see the plan, so only share it with people you mean to.
Google Analytics, only with your consent
If you choose "Accept" in the cookie message, we load Google Analytics to count visits and see which pages are read. Google Analytics sets cookies (_ga) and processes a pseudonymous identifier, the pages you viewed, your device and browser type, and your approximate location (country/city). It does not see your plan. If you don't accept, nothing from Google Analytics is loaded.
Legal basis: your consent (Art. 6(1)(a) GDPR, Art. 4(5) Greek Law 3471/2006). You can withdraw it at any time from , which also deletes the _ga cookies. Google Ireland Ltd acts as our processor, and data may be transferred to the US under the EU-US Data Privacy Framework. The data is kept for at most 14 months. More in Google's privacy policy.
Hosting and fonts
The site is hosted on Microsoft Azure (EU data centre). Like any web server, it processes your IP address and technical request details to deliver the pages and protect the service. Fonts are loaded from Google Fonts, so your browser sends your IP address to Google when a page opens. Legal basis: our legitimate interest in running the site (Art. 6(1)(f) GDPR).
When you email us
If you email us, we use your address and message only to reply and to improve Holidaya. We keep them as long as that takes and delete them if you ask. Legal basis: your request and our legitimate interest in answering (Art. 6(1)(b) and (f) GDPR).
We don't sell data
We don't sell or rent personal data and we don't show personalised ads. If we add affiliate links in the future (e.g. for hotels), they will be plain links marked as such, and we will update this page.
Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw your consent. Email info@holidaya.gr. You can also complain to the Hellenic Data Protection Authority (dpa.gr) or the authority where you live.
Children
Holidaya is meant for adults planning their leave. We don't knowingly collect data from children under 15.
Changes
If anything changes, we will update this page and the date at the top.