Privacy Policy

Duner is a beach-trip search and information platform covering vacation rentals, things to do, beach-equipment rental companies, town guides and related travel information. This policy explains what information we collect, how we use it, and the choices you have. The short version: we collect as little as reasonably possible, we don't sell your personal information, and we don't use your personal information for cross-site behavioral advertising.

Who we are

Duner Beach (www.dunerbeach.com) is a travel search operated by Duner Beach Media LLC, a Virginia limited liability company doing business as Duner Beach ("Duner," "we," "us"). Our registered office is 8401 Mayland Dr, Suite S, Richmond, VA 23294. You can reach us any time at hello@dunerbeach.com.

What we collect

• Email addresses you choose to give us. If you sign up on our "Keep me posted" form, we collect the email address you enter so we can send the updates you asked for. Rental companies invited to the restricted demo area may also provide a business email address to receive a one-time access code — that area is for invited businesses, not the general public.
• Information you send us. If you email hello@dunerbeach.com or otherwise contact us, we receive your email address and whatever information you choose to include in your message.
• What you type into the "missing company" form. The beach-gear directory lets you tell us about a company we've missed. We collect what you type in that one box — meant to be a company name and website, not anything about you; it has no email field, so we can't reply to it. Unless a form asks for it, please don't include personal or sensitive information in anything you submit.
• Basic technical information. Our hosting and security providers necessarily process standard network and request information — such as IP address, browser and device information, requested pages, and security-related signals — to deliver and protect the site. We don't use this information to build advertising profiles.
• Privacy-first analytics. We use Cloudflare Web Analytics to understand page views, visits, browser and device categories, approximate country, and performance, in aggregate. Cloudflare states that Web Analytics does not collect visitors' personal data, does not use cookies or local storage for its usage metrics, and does not fingerprint individual visitors.
• Technical error reports. If a page hits a technical error — a script failure, a resource our security policy blocked, or a form submission that fails to go through — your browser may send us a short automatic report. It contains: which kind of error it was; the error message, and for one class of error the technical stack trace that goes with it (the chain of scripts and line numbers the error passed through); the address, line and column of the script that produced it; the page's path; the time; your browser's user-agent string (the line your browser identifies itself with, naming the browser, its version, your operating system, and often your device model); and a coarse country code. We strip the page's query string, so your searches and filters are not included. These reports are designed not to contain form entries or anything you typed, and the reports we retain are deleted after 30 days. We use them only to fix technical problems.
• Anonymous search-use counters. Our search pages send us tiny anonymous counts of search outcomes — for example, that a search page loaded, or that a search ended with no matches or only a few. Each count carries only short fixed labels from a preset list: which search page, whether the layout was phone- or desktop-sized, which kind of filter changed (such as "town" or "items" — never the value you chose), a coarse result-count band, and on the beach-gear page the match-tier it landed on. These counters contain no search terms or filter values, no query strings, no free-typed text, and nothing that identifies you. We store them only as daily totals, which are deleted after 90 days, and use them to find dead-end searches and broken pages.
• Affiliate and referral information. When you follow certain links, the provider may use a Duner referral identifier to attribute a later booking or purchase to us. Partners may report limited transaction information back to Duner, such as whether the referral converted, what was booked or purchased, the transaction amount or status, and the commission or referral fee earned by Duner. We do not receive your payment-card information from these partners.

Duner's public search does not ask you to provide your name, phone number, payment details, or an account password, and you don't need an account to search.

How we use it

• To send Duner updates you asked to receive, until you unsubscribe.
• To respond when you contact us.
• To measure referrals, calculate commissions, and understand which Duner links and offerings result in bookings or purchases — working from the transaction reports our affiliate partners send us, described above. Duner's own pages don't report which links you click to us; the record of listings you've opened stays in your browser (see "Cookies, local storage, and third-party requests" below).
• To operate, secure, and improve the website.

We do not sell or rent your personal information, and we do not use personal information collected through Duner to send marketing emails unless you asked to receive them.

How long we keep information

We keep personal information only for as long as reasonably needed for the purpose we collected it, or as necessary for legal, security, accounting, or recordkeeping purposes:

• Email addresses provided for updates are kept while you remain subscribed. After you unsubscribe, we may retain the minimum information needed to record and honor your opt-out request.
• Messages you send us may be kept as reasonably necessary to respond to you and maintain appropriate business records.
• Company tips sent through the beach-gear "missing company" box are kept as reasonably necessary to review the tip and maintain a record of what we published and why.
• Demo-area access information may be kept as necessary to administer and secure that access.
• Affiliate and referral records may be kept as reasonably necessary to reconcile commissions, maintain accounting and tax records, investigate discrepancies or fraud, and maintain appropriate business records.
• Technical error reports we retain are deleted after 30 days.
• Anonymous search-use counters are stored only as daily totals and are deleted after 90 days.
• Our service providers may maintain technical logs or backups on their own retention schedules.

Service providers we rely on

We use a small number of third-party service providers to operate Duner. They process information in connection with providing, securing, maintaining, and supporting the services we use, subject to their applicable terms and privacy practices:

• Formspree — processes form submissions for us (the signup form and the beach-gear "missing company" form). Your browser sends the form directly to Formspree, so Formspree also receives the standard technical information that comes with any web request, such as your IP address and browser information. It may store those submissions according to our account settings and its retention practices.
• Cloudflare — hosts the site, routes our email, provides security, and supplies our cookieless, privacy-first web analytics.
• Email and communications providers — route, deliver, and store business email and messages you send us.

Each has its own privacy practices governing how it handles information in connection with the services it provides to us.

Third-party providers, booking sites and referral relationships

Duner is a search and information platform, not a booking site. When you follow a result, you may leave Duner for a rental company, marketplace, experience provider, equipment vendor, or other third-party service. If you contact or transact with that provider, its privacy policy and practices apply to the information you provide there. Some of those links are affiliate or referral links, or may otherwise be associated with a referral arrangement under which Duner can earn a commission or referral fee if you complete a booking or purchase. Duner does not charge you a separate fee for following such a link; prices, taxes, fees, and other charges are determined by the third-party provider. We encourage you to review the privacy practices of any provider or third-party service you interact or transact with.

Cookies, local storage, and third-party requests

Cookies: we keep cookies to a minimum. Duner does not use advertising or cross-site tracking cookies. Cloudflare may set cookies that are necessary for security or site functionality, and Cloudflare Web Analytics itself does not use cookies or local storage to measure site usage.

Stored in your browser: Duner's search pages — including the beach-gear search — use your browser's local storage for convenience features: starred homes and activities, recent searches, which listings you've opened, a snapshot of your starred homes' latest prices (so a return visit can show you what changed), and one-time interface settings. These stay in your browser rather than in a Duner user account. Clearing Duner's site data in your browser removes them, and each search page's recent-search list has its own "forget these" control beside it.

Search addresses contain the search itself. The address of a Duner search page can include your selected weeks, filters and starred homes or activities. That is what lets a refresh, a bookmark, a copied address and the share button all reopen the same search — and it means anyone you send that address to can see the search information encoded in it.

Third-party content requests: some Experiences pages load images directly from Viator or its image-delivery provider. When an image loads, your browser makes a request to that third party, which receives the standard technical information that comes with any web request, such as your IP address and browser information. This happens when the image loads, before you click the result. When you click a result and leave Duner, the destination site may set its own cookies and use its own technologies under its own privacy policy. Some results also offer a map link that opens the address in Google Maps; that is an ordinary link you choose to follow, and Google receives the request under its own privacy policy when you do.

Server-side marketplace refreshes: the Experiences search also refreshes its Viator prices, ratings and review counts through a Duner-operated service on this site. The provider request is for the catalog itself, not for an individual visitor. It does not include your Duner search, page address or a Duner user identifier.

Browser privacy signals

Duner does not sell personal information, use personal information for cross-site behavioral advertising, or track visitors across unrelated websites. Because Duner does not engage in those practices, browser "Do Not Track" signals do not change how Duner operates. Third-party content providers and referral partners may receive technical or referral information when your browser interacts with their services, as described in this policy, and their own privacy policies govern their practices.

Your choices

• Unsubscribe from Duner emails at any time — every email includes a way to opt out, or just email us.
• Access, correct, or delete personal information we can reasonably identify as yours by writing to hello@dunerbeach.com. For most visitors, the only such information we're likely to have is an email address or something you voluntarily sent us. We honor reasonable privacy requests regardless of where you live, subject to information we must retain for legitimate legal, security, or recordkeeping purposes. Depending on where you live, applicable privacy law may provide additional rights.

Security

We use reasonable administrative and technical safeguards appropriate to the limited information we collect. No website, transmission method, or storage system can be guaranteed to be completely secure.

Children

Duner is intended for adults planning travel and is not directed to children under 13. We don't knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it.

Changes to this policy

If we update this policy, we'll revise the "last updated" date above and post the revised policy here. Where required by law, we will provide additional notice before a change takes effect.

Contact

Questions about your privacy? Email hello@dunerbeach.com.