Privacy Policy

Duner is a search and information platform for beach vacation rentals, things to do, beach-equipment rental companies, and related travel information. This policy explains what information we collect, how we use it, and the choices you have. The short version: we collect as little as reasonably possible, we don't sell your personal information, and we don't use your personal information for cross-site behavioral advertising.

Who we are

Duner Beach (www.dunerbeach.com) is a travel search operated by Duner Beach Media LLC, a Virginia limited liability company doing business as Duner Beach ("Duner," "we," "us"). You can reach us any time at hello@dunerbeach.com.

What we collect

• Email addresses you choose to give us. If you sign up on our "Keep me posted" form, we collect the email address you enter so we can send the updates you asked for. Rental companies invited to the restricted demo area may also provide a business email address to receive a one-time access code — that area is for invited businesses, not the general public.
• Information you send us. If you email hello@dunerbeach.com or otherwise contact us, we receive your email address and whatever information you choose to include in your message.
• What you type into the "missing company" form. The beach-gear directory lets you tell us about a company we've missed. We collect what you type in that one box — meant to be a company name and website, not anything about you; it has no email field, so we can't reply to it. Unless a form asks for it, please don't include personal or sensitive information in anything you submit.
• Basic technical information. Our hosting and security providers necessarily process standard network and request information — such as IP address, browser and device information, requested pages, and security-related signals — to deliver and protect the site. We don't use this information to build advertising profiles.
• Privacy-first analytics. We use Cloudflare Web Analytics to understand page views, visits, browser and device categories, approximate country, and performance, in aggregate. Cloudflare states that Web Analytics does not collect visitors' personal data, does not use cookies or local storage for its usage metrics, and does not fingerprint individual visitors.
• Error reports. If a page hits a technical error — a script failure, a resource our security policy blocked, or a form submission that fails to go through — your browser may send us a short automatic report. It contains: which kind of error it was; the error message, and for one class of error the technical stack trace that goes with it (the chain of scripts and line numbers the error passed through); the address, line and column of the script that produced it; the page's path; the time; your browser's user-agent string (the line your browser identifies itself with, naming the browser, its version, your operating system, and often your device model); and a coarse country code. The page's path is sent without its query string, so your search terms and filters are not included. The diagnostic information we retain is designed not to include your searches, form entries, or anything you typed, and reports are deleted after 30 days. It exists so we can fix broken pages, nothing else.
• Affiliate and referral information. When you follow certain affiliate links, the provider may use a Duner referral identifier to attribute a later booking or purchase to us. Affiliate and referral partners may report back limited information such as whether a referral resulted in a booking or purchase, the product or experience booked, the transaction amount, the booking status, and the commission earned by Duner. We do not receive your payment-card information from these partners.

Duner's public search does not ask you to provide your name, phone number, payment details, or an account password, and you don't need an account to search.

How we use it

• To send Duner updates you asked to receive, until you unsubscribe.
• To respond when you contact us.
• To measure referrals, calculate commissions, and understand which Duner links and offerings result in bookings or purchases.
• To operate, secure, and improve the website.

We do not sell or rent your personal information, and we do not use personal information collected through Duner to send marketing emails unless you asked to receive them.

How long we keep information

We keep personal information only for as long as reasonably needed for the purpose we collected it, or as necessary for legal, security, accounting, or recordkeeping purposes:

• Email addresses provided for updates are kept while you remain subscribed. After you unsubscribe, we may retain the minimum information needed to record and honor your opt-out request.
• Messages you send us may be kept as reasonably necessary to respond to you and maintain appropriate business records.
• Company tips sent through the beach-gear "missing company" box are kept as reasonably necessary to review the tip and maintain a record of what we published and why.
• Partner access information may be kept as necessary to administer and secure partner access.
• Affiliate and referral records may be kept as reasonably necessary to reconcile commissions, maintain accounting and tax records, investigate discrepancies or fraud, and maintain appropriate business records.
• Technical error reports we retain are deleted after 30 days.
• Our service providers may maintain technical logs or backups on their own retention schedules.

Service providers we rely on

We use a small number of third-party service providers to operate Duner. They process information in connection with providing, securing, maintaining, and supporting the services we use, subject to their applicable terms and privacy practices:

• Formspree — processes form submissions for us (the signup form and the beach-gear "missing company" form). Your browser sends the form directly to Formspree, so Formspree also receives the standard technical information that comes with any web request, such as your IP address and browser information. It may store those submissions according to our account settings and its retention practices.
• Cloudflare — hosts the site, routes our email, provides security, and supplies our cookieless, privacy-first web analytics.
• Email and communications providers — route, deliver, and store business email and messages you send us.

Each has its own privacy practices governing how it handles information in connection with the services it provides to us.

Links to booking sites & affiliate relationships

Duner is a search and information platform, not a booking site. When you follow a result, you may leave Duner for a rental company, marketplace, experience provider, equipment vendor, or other third-party service. If you contact or transact with that provider, its privacy policy and practices apply to the information you provide there. Some of those links are affiliate links, which means Duner may receive a commission or referral fee if you complete a booking or purchase. Duner does not charge you a separate fee for using an affiliate link; prices, taxes, fees, and other charges are determined by the third-party provider. We encourage you to review the privacy practices of any provider or third-party service you interact or transact with.

Cookies, local storage, and third-party requests

We keep cookies to a minimum. Duner does not use advertising or cross-site tracking cookies. Cloudflare may set cookies that are necessary for security or site functionality, and Cloudflare Web Analytics itself does not use cookies or local storage to measure site usage.

Duner's search pages — including the beach-gear search — use your browser's local storage for convenience features: starred homes and activities, recent searches, which listings you've opened, a snapshot of your starred homes' latest prices (so a return visit can show you what changed), and one-time interface flags (like whether we've already shown you a tip). These items are stored locally in your browser rather than in a Duner user account; clearing your browser's site data removes them, and the beach-gear search's recent-search list has its own "forget these" control beside it. One nuance worth knowing: the search page's own web address always encodes your current search, including which homes or activities you starred. That is what lets a refresh, a bookmark, a copied address and the share button all restore the same search — and it means anyone you give the address to can see what is encoded in it. Moving between the search pages carries that encoded search along in the address, including onto the public beach-gear page.

Some pages load content directly from third-party providers. On the experiences search, activity photos are loaded directly from Viator or its image-delivery provider; when your browser loads one of those images, it makes a request to that third party, which receives the standard technical information that comes with any web request (such as your IP address and browser information). This happens when the image loads, before you click anything. When you click a result and leave Duner, the destination site may set its own cookies and use its own technologies under its own privacy policy. Some results also offer a map link that opens the address in Google Maps; that is an ordinary link you choose to follow, and Google receives the request under its own privacy policy when you do.

The experiences search also refreshes its prices and availability through a Duner-operated service on this site. It fetches the whole catalog from the provider once per cache period — on the first request after the cached copy expires — and serves that cached copy to everyone else, rather than asking the provider again for each visitor. That call carries nothing about you — it is one request for the whole catalog, not a request per visitor, so no identifier, no search you typed, and no page address of yours reaches the provider through it. Your browser asks Duner for the cached result; Duner asks the provider.

Browser privacy signals

Duner does not sell personal information, use personal information for cross-site behavioral advertising, or track visitors over time across unrelated websites. Because Duner does not engage in those practices, browser "Do Not Track" signals do not change how Duner itself operates. We do not knowingly allow third-party advertising networks to track your activity across unrelated websites while you use Duner. Third-party content providers and affiliate partners may receive technical or referral information when your browser interacts with their services, as described in this policy, and their own privacy policies govern their practices.

Your choices

• Unsubscribe from Duner emails at any time — every email includes a way to opt out, or just email us.
• Access, correct, or delete personal information we can reasonably identify as yours by writing to hello@dunerbeach.com. For most visitors, the only such information we're likely to have is an email address or something you voluntarily sent us. We honor reasonable privacy requests regardless of where you live, subject to information we must retain for legitimate legal, security, or recordkeeping purposes. Depending on where you live, applicable privacy law may provide additional rights.

Security

We use reasonable administrative and technical safeguards appropriate to the limited information we collect. No website, transmission method, or storage system can be guaranteed to be completely secure.

Children

Duner is intended for adults planning travel and is not directed to children under 13. We don't knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it.

Changes to this policy

If we update this policy, we'll revise the "last updated" date above and post the revised policy here. Where required by law, we will provide additional notice before a change takes effect.

Contact

Questions about your privacy? Email hello@dunerbeach.com.