Privacy policy

1. Who is responsible

The data controller is Just One More Feature, s.r.o., IČO 24890154, Jeclovská 795, 588 22 Luka nad Jihlavou, Czech Republic. Commercial Register maintained by the Regional Court in Brno, section C, file 151058. Contact support@cruisehops.com for privacy questions or requests. This policy covers the website and CruiseHops MCP server.

2. Information we receive

Website and MCP requests can include search text, destination, dates, departure port, cabin and budget filters, selected sailing or offer identifiers, and technical request metadata. We do not require an account, payment information, passport details or health information.

When you connect an AI assistant, its provider sends the tool arguments and metadata it chooses to include. We do not request your complete conversation or memories. Relevant context is received only if the host includes it in a request. Avoid putting personal or sensitive information into cruise search fields.

Operational access and diagnostic logs can include IP addresses, browser or client details, timestamps, request identifiers, query parameters, bounded request/response bodies and errors. Common credential fields are redacted, but arbitrary text may still contain information you supplied. Emails to support include the address and content you choose to send.

3. Purposes and legal bases

We process cruise requests to provide the service you request. We use proportionate operational logs to maintain reliability, investigate faults and prevent abuse, based on our legitimate interests in operating a secure service. We may retain information where a legal obligation requires it.

Optional browser analytics requires your choice to enable it. You can decline and still search cruises, or change your choice at any time in Privacy settings. Do Not Track and Global Privacy Control signals disable browser analytics. We do not sell or rent personal data or use the service for advertising profiles.

4. Optional analytics and the public dashboard

If you enable analytics, a first-party cruise_session cookie groups requests for 30 minutes of inactivity. Its token is hashed in storage. The cruise_analytics preference cookie remembers your choice for up to 180 days. The session cookie is HttpOnly and, on HTTPS, Secure; cookies use SameSite=Lax.

The public /xadmin dashboard shows pseudonymous session histories containing filter summaries, result counts, timestamps and durations. It does not display exact free-text searches, IP addresses, browser details or cookie tokens. Public session identifiers are separate from cookie tokens. Enable analytics only if you are comfortable sharing these grouped summaries publicly.

Disabling analytics deletes the current browser session’s retained detail records when its cookie is still available, clears the session cookie and stops future collection. Anonymous aggregate counts remain. Older sessions whose cookies are no longer available expire under the retention policy. Stateless MCP monitoring records aggregate per-tool counts, durations and errors without assigning browser sessions; it does not publish prompts or tool arguments.

5. Recipients and external requests

Hetzner hosts our server in the European Union. Support correspondence is processed by our email service provider to deliver and respond to your messages.

When you use ChatGPT or Codex, OpenAI sends requests to CruiseHops and receives tool results; when you use Claude, Anthropic does so. Other MCP clients you choose may process the same exchanges. Their account, conversation, retention and international-transfer practices are governed by their own policies and controls. No OpenAI or Anthropic model API is called by the CruiseHops server itself.

Provider images may load directly from Carnival or Royal Caribbean infrastructure, exposing the network information normally needed to deliver an image. Following an official booking link sends you to the provider’s website under its policy. Your interactive search is answered from our stored catalog, not forwarded as a booking request to a cruise line. Information may also be disclosed when required by law.

6. Retention and security

Optional session and event details are retained for up to 30 days, subject to row limits that may remove them sooner. Anonymous hourly statistics are retained for up to 90 days. Operational web logs use daily rotation with 14 retained archives, normally about 15 days including the current file. Copies needed for a specific security incident or legal obligation may be retained for that purpose.

Support correspondence is kept while needed to handle your request and related obligations; you can ask us to delete it when no longer needed. Data sent to an AI host or external website follows that provider’s retention policy. Our direct storage is on the EU-hosted server; an AI provider you choose may process data outside the EEA.

We use HTTPS, restricted server access, credential redaction and bounded diagnostic capture. No method of transmission or storage can guarantee absolute security.

7. Your rights and choices

Depending on applicable law and the circumstances, you may request access, correction, erasure, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw optional analytics consent. Contact support@cruisehops.com. Provide a relevant date, request identifier or page URL if possible, and avoid sending unnecessary personal documents. We may need proportionate information to identify your records.

You may complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), https://uoou.gov.cz, or your local supervisory authority. Withdrawal does not affect the lawfulness of earlier consent-based processing. We do not make decisions with legal or similarly significant effects about you through automated processing.

8. Updates

Changes to this policy are published here with an updated effective date. Material changes to optional analytics will require an appropriate renewed choice. We do not intentionally seek personal data from children under 13; contact us if you believe it has been provided.