Earlier version, dated 30 October 2026 (the version that added flight bookings). It was replaced on 30 October 2026, when Wikimedia Commons photos were added. Read the current version.
Last updated: 30 October 2026 (later version, adds flight bookings)
We collect and use personal information to provide Loomavoy's account, trip-planning, booking and support features, protect the service, and meet legal obligations. We do not sell personal information. We share information with service providers and booking partners only as needed for those purposes, as described below.
Loomavoy ("we", "us") is a trip-planning service operated by Norton Media Enterprise, LLC, a South Carolina limited liability company based in Conway, South Carolina, USA. Contact: support@loomavoy.com.
This policy covers the Loomavoy app and website at loomavoy.com, including the travel articles at loomavoy.com/articles.
| What | When | Why | Where it is kept |
|---|---|---|---|
| Trips: destination, dates, travellers, stops, planned times, notes, budget, preferences and guest nationality | While you plan | To show and save your plan | In your browser only (this device's storage) while you are signed out. Trips you make while signed in are saved to your account; trips from this browser are copied to your account only if you choose Import |
| Email address | When you create an account or sign in | To identify your account and open your trips on other devices | Your Loomavoy account |
| Password, if you set one | When you create an account or add a password | To sign you in | Your account, only as a one-way PBKDF2 hash; we can't read it |
| Passkeys, if you add one | When you add a passkey | To sign you in with your device | Your account (the public key only; your fingerprint or face never leaves your device) |
| 6-digit email codes | When you create an account or reset a password | To confirm you own the address | Stored hashed for up to 15 minutes; sent by our email provider, Resend |
| Nationality (required for hotel bookings) | When you save it in Account → Your details → Personal details, or choose the lead guest's nationality in checkout | Hotel suppliers price some rates by the lead guest's nationality, and it is part of the hotel booking | Your Loomavoy account. If you are signed out or haven't saved one, hotel prices use the country from your browser's language settings (or one this browser remembered earlier), and nothing is stored until you book. It is sent with hotel searches (see "Who we share it with") |
| Personal details, if you save them (Account → Your details → Personal details): name, gender, date of birth, mobile number and contact email, home address and an emergency contact (name, relationship and phone) | Only when you save them | To keep your travel details in one place | Your Loomavoy account. Date of birth, home address and emergency contact are encrypted (AES-256-GCM) with a key kept separately from the database before they are stored, and are shown in full only to you when signed in |
| Airport security, if you save them (Account → Your details → Airport security): TSA PreCheck Known Traveler Number and Redress number | Only when you save them | To keep these numbers ready for flight bookings | Your Loomavoy account, encrypted (AES-256-GCM) before they are stored. After saving, Loomavoy shows only the last 4 characters of each number again |
| Travel documents, if you save them (Account → Your details → Travel documents): passport issuing country, passport number and expiry date | Only when you save them | To keep your passport details ready for flight bookings | Your Loomavoy account, encrypted (AES-256-GCM) before they are stored. After saving, Loomavoy shows only the last 4 characters of the passport number again |
| Flight preferences and accessibility, if you save them: seat preference, special-assistance needs (for example wheelchair, visual or hearing assistance) and any accessibility notes | Only when you save them | To remember what you need when you travel | Your Loomavoy account. These details can reveal health information: save them only if you want to |
| Hotel booking: lead guest's first and last name, email, phone and nationality; the hotel, room, dates, number of guests and children's ages, price, cancellation terms and booking references | When you book a hotel | Our booking partner and the hotel need them to make and service the booking; we need them to support you, send your confirmation email and keep accounting records | The booking record (separate from your account) and the supplier. The confirmation email lists the lead guest's name and nationality. The billing country is checked against US sanctions and not stored |
| Flight booking: each traveller's first and last name, date of birth, gender, nationality and, when entered or required, passport or ID number, issuing country and expiry; the booking contact's name, email and phone; the flights, price and booking references | When you book a flight | The airline requires each traveller's details as on their passport or ID to issue the ticket; Nuitee needs them to make and service the booking; we need the contact details and booking to support you, send your confirmation email and keep accounting records | Dates of birth, gender, nationality and passport or ID details are sent to Nuitee and the airline and are not stored by Loomavoy. The booking record (separate from your account) keeps the travellers' names and traveller type (adult, child or infant), the contact's name, email and phone, the flights, price and references. The billing country is checked against US sanctions and not stored |
| Flight searches: airports, dates, number of adults and children's ages, cabin and fare choices, currency | When you search flights | To get fares | Sent to our booking partner without your name or contact details. Results are held in the server's memory for 5 minutes so a repeated search doesn't call the partner again |
| Hotel searches: destination location, dates, rooms and guests, currency and nationality | When you check rooms | To get prices and to recheck the room you choose | Sent to our booking partner. The offers returned are stored with the search (no name or contact details) so the price can be rechecked before you pay |
| Payment card details | When you pay | To pay for the booking | Entered only in our booking partner's secure payment form. Loomavoy never receives or stores card numbers |
| Other searches (destination, dates, party size, filters, search words) | When you search | To get results from our data partners | Sent to the partner that answers the search, without your name, account or contact details. Loomavoy keeps no separate search history: "recent searches" on the home page are your saved trips. Results may be held briefly in the server's memory (from 15 minutes to a day) so repeated searches don't call the partner again |
| A one-way hashed key derived from your connection's IP address | On each search request | To keep usage within fair limits | Our website turns your IP address into a keyed hash before it reaches the app's server; the server keeps only that hash with hourly request counts. Your IP address itself is not stored by the app's server |
| Server request logs: the type of request, the page or API path (without search details), the result and the time | Each request to the app's server | Security and running the service | Google Cloud's logging, under its log retention |
| Standard web server logs (IP address, time, page, browser) | Visiting the website or articles | Security and operating the site | Our web host, Bluehost, under its standard log retention |
| Comments on articles, if you post one: name, email, optional website, the comment, and the IP address and browser type WordPress records with it | Only if you comment | To publish and moderate comments and prevent spam | The articles site (WordPress, hosted by Bluehost). Your name, website and comment are published; your email and IP address are not |
About the details you save under Account → Your details: they are optional, and each one can be changed or removed at any time. Loomavoy does not currently send any of them to a hotel, airline, the TSA or any other partner (hotel bookings use only the lead guest's name, email and phone, and flight bookings only the traveller details entered at flight checkout). All of them are included in full in your "Download my data" file, and deleting your account deletes them from our live database straight away.
Loomavoy's home screen has a Show my coordinates button. Only if you tap it and allow your browser's or device's location request, your device location is used to display your coordinates rounded to the nearest minute (roughly 1–2 km). The coordinates are shown only on your screen: they are not stored, not saved to trips or your account, and not sent to Loomavoy's servers or any partner. If you have already allowed location for loomavoy.com, the coordinates are shown again automatically when you open the home screen; you can withdraw permission in your browser or device settings. The Loomavoy mobile apps don't request location permission.
Searches for places and hotels use the destination's location, not yours.
Loomavoy does not sell activities, deals or event tickets itself today; they are bought on the provider's website. If an activities supplier is added in Loomavoy, this policy will name it before any booking details are shared with it.
Loomavoy is not directed to children. You must be at least 16 to create an account, and at least 18 to make a booking.
We will post changes here with a new date, keep earlier versions available (linked below), and tell signed-in users about significant changes.
See also our booking terms and terms of use.
Earlier versions: 28 October 2026, 28 October 2026 (later version), 29 October 2026, 30 October 2026 (before flight bookings).