Privacy Policy
Last updated October 15, 2026
This policy explains what information The Sauna Mill collects, how we use it, who can see it and the choices you have.
1. What we collect
When you create an account: your name, email address and a password (stored only as a secure one-way hash, never in readable form).
When you use the site: what you choose to send or post, such as booking requests (date, location, guests, message and an optional phone number), messages, reports, contact-form messages, and, for owners, business profiles, saunas, marketplace listings, photos and contact details.
Location: the zip codes you search with. To show saunas near you before you search, we use the approximate city and coordinates our hosting provider derives from your IP address. We don't use your device's GPS, and we never ask rental businesses or sellers for a street address.
Technical data: like most websites, our hosting provider processes your IP address, browser type and request logs to deliver and secure the site. We also count, per business, how often it appears in search and how often its profile is viewed; those totals aren't tied to you.
Payments (once paid plans start): card details are entered with and stored by our payment processor, Stripe. We never see or store your full card number.
2. How we use it
- To run your account and the features you use: search, profiles, listings, booking requests, messages.
- To send emails you'd expect: password resets, booking and message notifications, listing updates and receipts.
- To review businesses and listings, keep the site safe, investigate reports and prevent spam and fraud.
- To understand and improve how the site is used.
- To meet legal obligations.
4. Service providers
We use trusted providers to run the site. They process data only to provide their service to us:
- Vercel (hosting), Neon (database), Upstash (rate limiting and caching), Cloudflare R2 (photo storage)
- Resend (sending email) and Stripe (payments, once paid plans start)
- OpenStreetMap: maps are loaded from OpenStreetMap's servers, which see your IP address, and zip codes are looked up with its Nominatim service
We may also share information if the law requires it, or to protect people's safety or our rights.
6. How long we keep it
We keep your information while your account is open. When you ask us to delete your account, we delete or anonymize your personal information, except what we need to keep for legal, tax, safety or dispute reasons (for example records of removed listings, reports and payments).
7. Your choices and rights
You can update your listings and business details from your dashboard. To see, correct, download or delete your personal information, or close your account, send a privacy request through our contact page. We'll verify it's you and reply within the time the law requires.
Depending on where you live (for example California), you may have additional rights, such as knowing what we collect and not being discriminated against for using your rights. We don't sell or share personal information as those laws define it.
8. Children
The Sauna Mill is for adults. Accounts are for people 18 and over, and we don't knowingly collect information from children.
9. Security
We use encrypted connections (HTTPS), hashed passwords, access controls and rate limits. No system is perfectly secure, so use a strong, unique password and tell us right away if you think your account has been misused.
10. Changes
We'll update this policy when our practices change and post the new date at the top. Significant changes will be announced by email or on the site.
11. Contact
Questions about privacy? Contact The Sauna Mill.