Privacy policy

Effective date:26 September 2026. This policy describes how Wright Place handles personal information.

In short

You can read every public page on this site without an account, and without giving us anything.
To make a reservation you sign in with your Google account. From Google we receive your name, your email address, and an account identifier. We never receive your Google password.
We store the reservation details you give us — your dates, your contact information, and your history of reservations with us.
This site runs no analytics, no advertising and no third-party trackers. There are no advertising or analytics cookies.
We do not sell your personal information, and we do not share it for advertising.
You can ask us to delete your information at any time — seeHow to request deletion.

Who we are

Wright Place is a single-family home in Ledbetter, Texas, offered for short-term rental by the family that owns it. This website is our own booking channel: when you reserve through it you are dealing directly with the owners.

Because we rent one house ourselves and do not run a booking marketplace, the personal information described here is limited to what we need to answer your enquiry and host your stay.

For the purposes of data protection law, the owners of Wright Place are the controller of the information described in this policy. Their postal address is PO Box 841, Giddings, Texas 78942. TODO(owner): add the owner’s or entity’s legal name

What we collect

Reading the site

Nothing. You do not need an account to read these pages, and we do not ask you for any personal information to do so.

Signing in with Google

Reservations are tied to an account so that you can see your own bookings and we can tell who a reservation belongs to. Sign-in is handled by Amazon Cognito, which brokers a Google sign-in. When you sign in this way, we receive:

Your name, as it appears on your Google account.
Your email address, which we also use as the address for reservation confirmations.
A profile identifier — an account identifier issued for your sign-in, which lets us recognise your account on later visits and match reservations to you.

That is the whole list. We do not receive your Google password, and we do not receive your contacts, your Google activity, or any other content of your Google account. Google tells you what it shares when you approve the sign-in, and Google's own handling of your account is governed by Google's privacy policy, not this one.

Making and holding a reservation

When you request or hold a reservation, we store:

Reservation details — which property, the dates, the number of guests, and any notes you send us.
Dates — your arrival and departure dates, and when the reservation was made or changed.
Contact information — your name, email address, and any phone number you give us, so we can confirm the reservation and reach you during your stay.
Reservation history — past and cancelled reservations on your account, so that you and we can both see what was booked.

We do not ask for, and do not want, sensitive information such as government identifiers, payment card numbers or health information. If you send us something like that in a free-text note, we will delete it.

Technical information

Like any website, the infrastructure that serves this site can record standard technical information about requests — such as the IP address a request came from, the time it was made, and the browser's user agent. We use this only to keep the site working, to diagnose faults and to investigate abuse. We do not use it to build a profile of you or to advertise to you. TODO(owner): confirm the server-log retention period, or turn logging off if it is not needed

How we use it

To confirm, manage, change and honour your reservation.
To contact you about your stay — before, during and shortly after it.
To keep a record of our own bookings, so the same dates are not let twice.
To meet our tax, accounting and legal obligations as a rental business.
To keep the site secure and working, and to investigate misuse.

We do not use your information for advertising, we do not sell it, and we do not use it to train advertising profiles.

Cookies and tracking

This site sets no advertising cookies and no analytics cookies, and it contains no third-party trackers. There is no Google Analytics, no tag manager, no advertising pixel, no social media widget and no embedded third-party script on any page. Nothing here reports your visit to anyone else.

The public pages you are reading are plain files. They set no cookies at all.

Storing a reservation does require us to know that you are signed in. That needs a strictly necessary session in your browser, which is used only to keep you signed in and to protect the request you are making. It is not used for advertising, analytics or profiling, and nothing else on this site depends on it. TODO(owner): confirm the exact session mechanism and its lifetime once the reservation system ships

Your browser also lets you block or delete cookies; if you block the strictly necessary session, signing in and holding a reservation will not work, but the rest of the site will.

Where your information is stored

This site is hosted on Amazon Web Services. In plain terms:

Amazon S3 and Amazon CloudFront: The pages, styles, images and policy text you are reading are static files served from S3 and delivered through CloudFront, AWS's content delivery network. These hold no personal information about you.
AWS Lambda: The application logic behind sign-in and reservations runs in Lambda when it is needed, rather than on a server we keep running.
Amazon DynamoDB: Reservation records — the reservation details, dates, contact information and reservation history described above — are stored in DynamoDB.
Amazon Cognito: Your sign-in identity — your name, email address and the profile identifier — is held by Cognito, which is what performs the Google sign-in on our behalf.

AWS processes this information on our instructions as our hosting provider. AWS may store it in data centres outside your own country, including in the United States, which is where this rental business operates.

We share personal information only in these situations:

With AWS, as the hosting provider described above, which processes it on our instructions.
With Google, and only in the sense that Google is the identity provider you chose to sign in with — Google handles your Google account under its own privacy policy.
With our accountant or tax adviser, where we are required to keep and report booking records. TODO(owner): confirm who handles the owners’ books, and whether their details should be named here
Where the law requires it — for example in response to a valid legal request, or to establish or defend a legal claim.
To protect people and property — where sharing is necessary to prevent harm or investigate misuse of the property or this site.

We do not sell your personal information. We do not share it with advertising networks, data brokers or listing platforms, and we do not share it with any third party for their own marketing.

One of the ways to reach the owners is a third party’s platform: the guest community runs on Discord, which this site links to but does not embed and loads nothing from. If you ask a question there, that conversation takes place on Discord’s platform and is governed by Discord’s own privacy policy rather than this one, and Discord handles it as an independent service rather than on our instructions. Email us instead if you would rather keep the exchange with us alone.

How long we keep it

We keep reservation records for as long as we need them to run the rental and to satisfy tax and accounting rules, and we delete what we no longer need. Your account sign-in details are kept while your account exists, or until you ask us to delete them.

TODO(owner): set the concrete retention period for reservation records and for account data, and state it here

Your choices

You can ask us to show you the personal information we hold about you, to correct it if it is wrong, or to delete it. You can also ask us to stop contacting you for anything other than a reservation you have with us.

If you are in a place with data protection law — the UK or EU GDPR, the California Consumer Privacy Act, or a similar regime — you have these rights by law, and we will honour a request made under them. We will not treat you differently for asking.

If you believe we have handled your information badly, please tell us first so we can put it right. You may also complain to your local data protection authority.

How to request deletion

To have your personal information deleted, email us and ask. Specifically:

Emailbookings@wrightplacetx.comfrom the email address you used for the reservation, with the subject line“Delete my data”.
Tell us whether you want everything deleted, or only some of it — for example, keep the reservation record but delete your account.
If you cannot email from that address, say so in the message and give us enough detail to identify the reservation, and we will verify it another way before deleting anything.

When you ask, we delete your sign-in identity from Cognito and your reservation records from DynamoDB, and we stop contacting you. We aim to action a deletion request within 30 days, and we will confirm when it is done. TODO(owner): confirm the deletion turnaround the owners can actually meet

We may have to keep a limited record of a completed stay where tax or accounting law requires it. If that applies, we will tell you what we are keeping and why, rather than pretending a deletion was total.

Security

The site is served over HTTPS, sign-in runs through Amazon Cognito rather than anything we wrote ourselves, and access to reservation data is limited to what the application and the owners need. We do not store your Google password, because we never receive it.

No website can promise perfect security. If we ever become aware of a breach that affects your information, we will tell you and the relevant authorities as the law requires.

Children

This site is not directed at children, and reservations must be made by an adult. We do not knowingly collect personal information from children. If you believe a child has given us their information, contact us and we will delete it.

Changes to this policy

The reservation system is still being built, so this policy will be revised before booking opens and whenever our practices change. When we change it we will update the effective date at the top of this page, and material changes will be described here rather than made quietly.

This policy does not cover any other website, including Google's, and it does not limit any rights you have under applicable law.

How to contact us

Questions about this policy, or about your information, go to the owners:

Privacy contact email: bookings@wrightplacetx.com
Postal address: PO Box 841, Giddings, Texas 78942
Website: wrightplacetx.com

The contact page carries the same email address and postal address, along with the ways to reach the owners about a stay.