Legal
Privacy notice
How we handle your personal data when you browse this site or book a stay. Written plainly, and specific about the parts most sites gloss over. If anything here is unclear, email us and we'll explain.
Who is responsible for your data
Unconquered Ridge, a short-term rental in Townsend, Tennessee, USA, is the data controller. Reach us any time at hosts@unconqueredridge.com — that is the right channel for any request about your data, and we can provide a postal address on request.
Browsing this site
Our own pages set no cookies at all — none for advertising, none for tracking, none for analytics. Nothing here profiles you or follows you around the web.
We do count visits, so we can tell which pages are worth writing. We
use Umami, a
privacy-focused analytics service, which records the page you viewed,
the site or search engine you came from, your country, and your browser
and device type. It does not set a cookie, does not
store anything on your device, and does not build a profile of you or
follow you to other sites. We cannot identify you from it. If you would
rather not be counted at all, set a browser local-storage key named
umami.disabled to 1 for this site, or use any
content blocker — the script reads that key and stops.
The one thing we store in your browser is your light/dark appearance
preference, saved locally under the key ur-theme if you
choose one — it never leaves your device and identifies nothing.
Our site is hosted on Microsoft Azure. Microsoft processes the network requests needed to serve pages to you, which involves your IP address; we don't receive or keep logs of those page requests.
We do keep one small technical log of our own. Our home page checks
that our service is running by calling our own status endpoint when it
loads (once, or a few times if the service is waking up), and those
calls are recorded in Microsoft Application Insights. We have checked
exactly what that stores: the time, what was requested, whether it
worked — and, instead of your IP address, an approximate location
derived from it: your city, state, and country. Your actual IP
address is not stored; that field is recorded as
0.0.0.0. No name, no account, no session identifier, and
nothing about your browser or device beyond a broad category such as
"PC". We use this to keep the site working, and it is deleted after 30
days.
The booking page, before you book anything
This is the part worth reading carefully. Our booking page embeds a booking calendar operated by Hospitable, our property management provider. We chose to embed it, so we're telling you exactly what it does.
As soon as the booking page loads — on every visit, whether or not you ever touch the calendar — a script we embed sends your IP address and the full web address of the page you're on to Hospitable, so it can confirm the calendar is running on an approved site. That page address includes anything in its query string, such as dates or guest counts carried from a link you followed. This request comes from our page, so it is our responsibility, not something buried in someone else's frame. It happens before you interact, which means that if you're reading this after opening the booking page, it has already happened. The only way to avoid it entirely is not to open that page — you can email us to book instead.
Once the calendar itself loads, it runs inside a frame served by Hospitable. That is their software on their servers, and we have verified that it:
- runs product analytics that include session recording — a replay of how the calendar is used — and stores identifiers in your browser in both a cookie and local storage;
- loads Stripe, the payment processor, which sets a cookie used to detect fraud.
We do not control that frame's contents and cannot switch those off from our side. Their handling is governed by Hospitable's privacy policy and Stripe's privacy policy. If you would rather not use it at all, email us and we'll take your booking directly.
Booking a stay
Everything you type into the calendar — your name, contact details, and payment information — goes to Hospitable and Stripe. It does not pass through this website, and card numbers never reach us at all. Hospitable holds the reservation record and shares the booking details with us so we can host you. Stripe may automatically decline a payment it judges to be fraudulent; if that happens and you think it's wrong, email us and we'll look into it with you.
What is collected, and why
| Data | Held by | Why | Legal basis | Kept for |
|---|---|---|---|---|
| Page viewed, referring site, country, browser and device type | Umami, on every page view of this site | Counting visits so we know which pages are worth writing | Our legitimate interest in understanding how the site is used | Per Umami's policy; no cookie, nothing stored on your device |
| Your IP address and the booking page's web address | Hospitable, sent by our page on every booking-page view | Confirming the calendar runs on an approved site (anti-fraud) | Our legitimate interest in protecting the booking channel | Per Hospitable's policy |
| Calendar usage, incl. session recording; analytics identifiers | Hospitable, inside its frame | Their product analytics | Theirs to state — see their policy | Per Hospitable's policy |
| Fraud-detection cookie | Stripe, inside that frame | Preventing fraudulent payments | Legitimate interest / legal obligation | Per Stripe's policy |
| Reservation details (name, contact, dates, party size) | Hospitable; shared with us to host your stay | Providing the stay you booked | Performance of a contract | As long as needed for the stay, then per our tax and accounting obligations |
| Payment records (amounts and references — never card numbers) | Stripe and Hospitable; totals shared with us | Payment, refunds, lodging-tax filing | Contract and legal obligation | As required by US and Tennessee tax law |
| Emails you send us | Us, in Microsoft 365 | Answering you | Legitimate interest | 720 days; mail about a booking is kept with that booking's records |
| Technical request log (time, path, result, and an approximate city-level location derived from your IP — the IP itself is not stored) | Us, in Microsoft Application Insights | Keeping the site running and diagnosing faults | Our legitimate interest in a reliable, secure site | 30 days, then deleted automatically |
Appearance preference (ur-theme) |
Your browser only | Remembering light/dark mode | Strictly necessary for a setting you chose | Until you clear your browser storage |
We do not sell your data, and we send no marketing email unless you separately ask us to.
Who else processes your data
- Hospitable — booking calendar, reservation records, guest messaging, door codes (policy)
- Stripe — payment processing, via Hospitable (policy)
- Microsoft — website hosting and our email
Children
Bookings are for adults. We don't knowingly collect data from children directly; children in your party appear only as guest counts you give us.
Your rights
You can ask us for a copy of your data, ask us to correct it, delete it, or send it to you in a portable form; object to a particular use; ask us to restrict how we use it; and withdraw any consent you gave. Email hosts@unconqueredridge.com and we'll respond within 30 days.
Because Hospitable and Stripe hold the booking and payment records, some requests have to reach them too — tell us and we'll pass it on, and you can also contact them directly using the policies linked above. Some records must be kept even after a deletion request: tax and payment records have legally required retention periods.
If you're in the UK or EU and think we've mishandled your data, you may complain to your national data protection authority.
Where your data is held
We're based in the United States, and this website runs in Microsoft's US data centers. Our other providers — Hospitable, Stripe, and their own sub-processors — decide where they store the data they hold; their policies, linked above, set out their locations and the safeguards they use for international transfers. If you're outside the US and want the specifics for a particular provider before you book, email us and we'll get you the current answer rather than guess.
Changes
If this notice changes in a way that matters, we'll update the date and version at the top.