PRIVACY · OCTOBER 15, 2026
Your shortlist.
Your space.
MacL operates this free Stay Finder preview. Account, payment and live supplier-search services are not enabled.
Quotes and browser storage
Your entered stay quotes, child ages, dates, prices, sources and notes are processed in the browser. “Save on this device” stores one list in this browser profile. It is accessible to anyone using the profile and is not an encrypted cloud backup. “Delete saved list” removes the stored copy while retaining your open page. Clearing site data also removes local copies.
Prepared accounts and cloud storage
Account services are disabled in this preview. When enabled, Supabase processes your email, sign-in credentials, confirmation/recovery flows and one saved cloud shortlist. Google sign-in is optional. Sign-in state is stored in this browser profile. A cloud list can contain travel dates, child ages, quoted prices and notes; use only information needed for comparison. Deleting the cloud list removes its content but keeps an empty revision marker to prevent an old tab restoring it. It does not delete the account, downloads, device copies, logs or backups. Prepared account archives include the basic profile and original cloud list. A separate permanent deletion request requires a recent sign-in and pauses account access while a server worker removes the login and owned cloud data. Private completed status receipts expire after seven days. Device copies, downloads, hosting logs and backups are separate; hosted lifecycle and retention acceptance remain release requirements.
Downloads
JSON backups and CSV summaries are downloaded files on your device. Deleting browser storage does not delete downloads. Store and share them carefully because they contain travel plans. Do not enter passport details, payment-card data, passwords or unnecessary personal information in notes.
Website and external requests
Vercel serves the site and may process connection IP addresses and request details in hosting logs. The app checks its same-origin service status and loads destination data from the site. There are no advertising or analytics SDKs, externally hosted fonts or automatic third-party map requests. Source and location links open other websites only when selected; those sites have their own policies. Theme preference is stored locally when available.
Prepared supplier connection
When enabled after review, supplier search will send geographic coordinates, dates, room count, adult count, child ages and cancellation preference to Duffel. No guest names are requested by this search. The server uses a daily keyed hash of the connection IP for short-lived rate-limit counters retained for up to 48 hours, plus aggregate day/month totals. The quota code does not store raw IP addresses; hosting logs are separate. Credentials remain server-side. This path is not enabled in the current preview.
Controls and questions
Comparison works without persistent storage. Download a backup if device storage is unavailable. Contact MacL through macl.app for questions. Policies and retention will be reviewed before accounts, cloud libraries or purchases are introduced.