Privacy at Nagaland Stays

Nagaland Stays is a free, independent directory of places to stay in Nagaland. The Data Fiduciary for this site is Nagaland Stays. This note explains what we keep and why.

What we collect

• Listing details from public sources: names, places, prices, photos and contact numbers that owners have published on booking sites, social media, maps and blogs. We note where each detail came from.
• What owners send us when they list or claim a place: the place’s details, the owner’s name and role, phone number, an email address if you choose to give one, a good time to call, and any links, prices or descriptions.
• Photos owners upload. Before a photo goes on the site, we remove the location (GPS) and other hidden camera data. The private original is only to check the listing; once the public sizes are live, we delete it.
• Map pins owners send. When you list or claim a place you can send where the stay is (the business / guest-house location): from your phone (“Use my location”) or by pasting a Google Maps link. We keep the point, how accurate your phone said it was, whether you asked us to show only the approximate area, and when you sent it. Your phone asks your permission first, and we read your location only once, when you press the button — to place that stay’s pin, not to track you. We don’t track where you go.
• Pin checks sent through “Is this pin right?”: whether the pin on the map is right for this place of stay (a business location, not a person’s home address as the product goal), the spot you send so we can correct that place’s pin (from your phone’s location once, or a pasted Maps link), how you know the place, a short note and, only if you choose to give it, your phone number. When you use “Use my location,” your phone shares where you are at that moment so we can place the stay’s pin — we don’t track where you go, and we never publish who sent a check. We don’t need an account or a cookie. A short notice on that form explains what we keep, why, and for how long before you send.
• Reports sent through “Something wrong?”: what’s wrong, and a contact if you give one.
• Verification records: when we called, what the owner confirmed, and screenshots of written permission (for example, for photos).
• To stop spam: we never store your IP address. We keep only a scrambled, one-way code made from it (a salted hash) and a count of how often it sent a form that hour. Both are deleted within 24 hours.

Why

To show accurate places to stay, to check each listing with its owner, to handle reports and removal requests, and to keep a record of what we changed and why.

Who sees what

• The public sees the listing: name, place, price, photos we’re allowed to show, and the contact number or booking link.
  • Verified places: we show the number only if the owner agrees. Otherwise we show their booking link instead.
  • Places we haven’t verified yet: we show the number from public sources, marked “* Numbers on unverified places may be out of date.” The number and its WhatsApp and Call buttons work, so guests can reach the place before we’ve called it.
• Pin checks: the pin we show is for the place of stay. We never show who sent a check or their number. Your number goes to the team’s private records sheet and a team email alert, is used only to call you about that pin, is never passed to the owner or anyone else, and is wiped from the website’s database after 90 days. Only checks with a number can move a pin to “likely location”; only our team can mark a pin exact. Giving a number is optional; sending the form after the on-page notice is how you agree to that use.
• Map pins: a pin shows on the map only after we’ve checked it. If you chose “approximate area only”, we show a point rounded to about 100 m and keep the exact one privately, only to check the listing.
• Only our small founding team sees owners’ full phone numbers and emails, sign-ups that aren’t live yet, private photo originals and verification records. Each person uses their own login, and we keep a log of who opened what.
• We don’t sell or share personal data with anyone else, and we don’t use it for advertising.

Where it’s stored

• The website and uploaded photos: our web host (a secure cloud database and secure cloud file storage). Like any web host, it keeps standard logs of requests to the site.
• Phone numbers and emails from sign-ups and claims go to the team’s private records sheet and to a team email alert, and stay in the website’s database while the listing exists.
• Our working records: protected and private file systems, open only to the team.

How long we keep it

• Unfinished sign-ups (you started but didn’t send): deleted after 24 hours.
• Spam-check codes (see above): deleted within 24 hours.
• Visit counts (see “Counting visits”): raw counts about 3 months; daily totals kept.
• Map pins we didn’t use (not approved, replaced or turned down): deleted after 90 days. An approved pin stays while the listing exists.
• Pin checks: the phone number (and its scrambled code) after 90 days; the whole check after 12 months — so we keep an audit trail of how a pin was decided.
• Private “set your pin” links: work once, for 24 hours, and are deleted 30 days after they expire.
• The change log: permanently. It holds masked numbers and names only, so we can see what changed without keeping clear contact details. Masking is one-way.
• Full phone numbers and emails: while the listing exists. When a listing is removed or an owner says no, we wipe the clear phone number and email immediately. We keep only a scrambled hash so the place isn’t re-added by mistake.
• Verification records (when we called, what the owner confirmed, and screenshots of written permission — not the photo file): while the listing is live, then 6 months after it is unpublished or taken down — evidence that we checked with the owner. The clock starts when the listing is no longer public. Pausing a listing does not start that clock.
• Photos we approved: once the public sizes are live, we delete the private original.
• Photos we removed or never approved: the original is deleted after 30 days.
• Withdrawn or rejected sign-ups: the full number and photos are deleted within 30 days.
• Copies in the team’s records sheet and email alerts (phone numbers and emails from sign-ups, claims, reports and pin checks): wiped within 90 days of the row or alert (or sooner when the website copy is wiped). Wipe is by hand until automation lands.
• Monthly backups: 2 years. Live systems erase on the schedules above; backups rotate so wiped data ages out, and a restore must not revive erased contact details.

Your choices

• Fix something: tell us and we’ll correct it. Changes to a listing must come from the number in the listing.
• Remove a photo: anyone can ask. We take it down within 24 hours, no proof needed.
• Remove a whole listing: if you’re the owner, we confirm it’s you on the listed number, then remove it.
• Withdraw a sign-up: reply with your reference number any time before it goes live.
• Access, correction or erasure: ask at the contact below. If you gave consent for a pin-check phone number, you can withdraw that agreement as easily as you gave it — email us or use “Something wrong?”.

Counting visits

We count visits on our own server, to learn which places and districts people look at and how they find us. We don’t use cookies or a tracking script for this, and we never store your IP address.

• What we count: the pages you open, what you search for, which filters you use, and when you tap WhatsApp, Call, Directions or Share on a place. With each, we note the site or link that sent you, whether you use a phone or a computer, and your rough location (country, state and town) as our web host reports it.
• How we tell visits apart: a scrambled code made from your connection and browser, with a key that changes every day. We can’t turn it back into who you are, and we can’t link your visits on different days.
• What we keep: the raw counts for about 3 months. After that, only daily totals for places, districts, countries and states, and search words. The totals don’t include towns or the daily codes. Anything we publish shows only numbers of 10 or more.
• We don’t sell this or share it with anyone, and we don’t use it for advertising.

Cookies and tracking

The site sets no cookies and loads no analytics, ads or other third-party scripts. (Our web host’s own analytics tool is not turned on.) Two owner pages (the last step of “List your place” and the private “set your pin” link) carry one small script of our own for “Use my location”. It does nothing until you press the button.

Contact

For privacy questions, rights requests or a complaint: contact@nagalandstays.com. Or use “Something wrong?” on any page.

Last updated: 30 Oct 2026