Privacy

When you buy from us — a welcome book or a printable sign set — you give us four kinds of data:

• Account info — the email you enter when you redeem your order, so we can reach you about it.
• Property details — the address, Wi-Fi, door code, and check-in times you type into the form, so we can build the book or signs.
• Host details — your name, phone, email, and anything you write about hosting. These appear in the book you share with guests.
• Payment — if you buy on Etsy, Etsy handles the whole payment. If you buy here on foreword.host, your card is entered on Stripe's secure checkout page — we never see or store card numbers. What we keep is the order record Stripe gives us: your email, the amount, and an order reference.

Your form data and the generated welcome book stay in our database for as long as your book is live, and until you ask us to delete it. Your guest link keeps working precisely because we keep that content.

We record basic, non-identifying usage events (for example, that a book page was opened) so we can tell whether the product is working. These carry no name, email, or address.

We use a small number of vendors to run the service. Each sees only what it needs to:

• Supabase — our database. Stores your form data and generated book.
• Vercel — hosting. Serves the site and your guest book link.
• Google Places — receives your property address so we can find nearby restaurants and sights. We don't send your name or any host details to Google.
• Anthropic (Claude) — sees your form contents to draft the prose. We don't send payment information, and the data isn't used to train their models.
• Stripe — payment processing for purchases made on this site. Stripe sees your card details on its own checkout page; we receive only the order confirmation (email, amount, reference).
• Resend — sends transactional email, such as your book-is-ready message. It sees your email address.
• Sentry — error monitoring. May incidentally capture technical details of a request when something breaks, so we can fix it.
• Viator — only if you opt into the tours section. Receives the property location to return nearby tours.

These vendors operate in the EU and the United States. We don't sell data to anyone, we don't run third-party advertising pixels, and we don't share lists with marketing partners.

We use essential cookies only. The important one is a session cookie that identifies your order after you redeem it — it's what lets you reach your builder and your private edit link without logging in. It's sent to our server with your requests, because that's how it does its job, and it's marked HttpOnly so scripts in your browser can't read it.

We don't use tracking cookies, advertising cookies, or fingerprinting, and there are no third-party trackers on this site.

Your Wi-Fi password and door code are the most sensitive things you give us, so here is exactly what happens to them:

• Where they live: in our database, readable only by our own server — no app user, script, or browser can query them directly. They're stored in usable form because your book has to display them to guests; that's the product.
• Where they appear: only inside your book page. The link is an unguessable ID and we tell search engines not to index book pages — but anyone who has the link can see them. That's by design; it's what lets a guest open the door at midnight without an app or a login.
• During generation: your form contents (including the Wi-Fi details) are processed by Anthropic's AI to write your book, under terms that exclude training on your data. Our prompts explicitly forbid repeating credentials in the book's prose — they appear only in their dedicated cards.
• Your controls: treat the link like a key. Rotate your door code between stays (the builder supports rotating codes), edit the Wi-Fi password anytime, take the book offline instantly from your edit link, or ask us to delete everything — done within 7 days, confirmed in writing.

Your welcome book is shared by a private link. It isn't listed publicly or indexed by search engines. Anyone holding the link can open it — that's what makes it easy for guests — so treat it the way you'd treat any share link, and remember you can take a book offline at any time.

We don't ask your guests to sign in and we don't collect their personal data.

Contact us with your order number — through your Etsy order if you bought on Etsy, or at hello@foreword.host if you bought here on foreword.host. We'll delete your account, form data, and welcome book within 7 days and confirm in writing. Deleting the book takes the guest link down with it.

You can request a copy of everything we hold on you the same way, with the same 7-day turnaround.

The product isn't designed for under-18 users and we don't knowingly collect data from minors. If you believe a minor has used the service, contact us using either route above and we'll delete the data.

If we change anything material, we'll email everyone with an active book at least 14 days before the change takes effect. We won't apply changes retroactively.

Foreword.host is the data controller for the purposes of GDPR. For any data-protection inquiry, reach us through our Etsy shop or at hello@foreword.host. You also have the right to lodge a complaint with your local data protection authority.