Privacy Policy

Last updated: August 1, 2026

HotelXray is a Chrome browser extension and related website that overlays award and cash availability data on Hyatt hotel pages, publishes researched club lounge information, and offers optional rate and availability alerts. This policy explains what data we collect and how we use it.

What we collect

The core extension and club lounge details work without a HotelXray account. If you use an account, alerts, referrals, or Pro billing, we collect the information needed to provide those services:

• Account information — your email address, account tier, sign-in and session records, and referral status. We use your email to send sign-in codes, alert notifications, billing messages, and other service emails.
• Alert settings — the hotel, dates, room type, price or points thresholds, notification mode, alert status, and notification history you configure.
• Billing records — your plan and subscription status plus Stripe customer, subscription, and price identifiers. Payment card details are entered on Stripe's hosted pages and are not stored by HotelXray.
• Feature usage events — signals about how the extension is used, including the hotel page, calendar month and dates viewed, filters, refreshes, alert and lounge interactions, extension version, and event time.
• Installation identifier — a random identifier generated for each extension installation. It lets us understand activity from the same installation and may be linked to your HotelXray account when you sign in.

We do not collect completed-booking details, booking confirmation numbers, your Hyatt password, World of Hyatt account credentials, full payment card number, card security code, or browsing activity from websites other than Hyatt and HotelXray.

How HotelXray fetches availability data

HotelXray runs only on Hyatt's website (hyatt.com). It has no access to, and cannot read, any other website you visit.

HotelXray reads award and cash availability from Hyatt and displays it in the side panel. To do this, it requests or uses recently cached availability for relevant hotels and dates:

• When you open a hotel or view a calendar month, HotelXray loads availability for those dates. If data it loaded earlier has become stale, it refreshes it automatically.
• When you manually refresh the calendar, it re-fetches the latest availability.
• To make the experience faster, HotelXray also prefetches availability for a small, bounded set of hotels it has shown you (such as similar hotels nearby), including nearby dates around your stay — so that when you navigate to them, the data is already filled in. This prefetching is limited to hotels you have actually viewed or been shown in the panel, happens only after a brief pause in your activity, and exists solely to optimize your experience.
• If you create an alert, HotelXray's monitoring service periodically checks the hotel and dates you configured. These checks continue even when your browser is closed so that HotelXray can email you when a condition is met.

Rate and availability responses may be stored as snapshots on HotelXray's servers. Those snapshots are not Hyatt account data and may be reused to fill calendars or evaluate alerts for multiple users watching the same hotel and dates.

Accounts and cookies

HotelXray does not require you to log in to Hyatt, and it works without any Hyatt account. It does not read your Hyatt login, password, account credentials, profile, or payment details.

If you sign in to HotelXray, we use a HotelXray session cookie or token to keep you signed in across the website and extension. This is separate from your Hyatt cookies.

HotelXray does not read the contents of your Hyatt cookies or send them to our servers. The only Hyatt cookie operation it performs is the consent-based session-recovery fix described below, which removes Hyatt's session cookies to clear the blank-page bug.

Local storage

Your preferences — such as selected room type, visible metrics, currency, and tax toggle — are saved locally in your browser using chrome.storage. Account session data and cached HotelXray responses may also be stored locally so the extension stays signed in and loads quickly.

Session recovery

Hyatt's website has a long-standing bug where its pages sometimes render blank in Chrome. Clearing the site's session cookies and reloading is a common, well-known remedy for this kind of blank-page issue. When HotelXray detects the problem, it can apply this fix by clearing Hyatt's session cookies and reloading — but only with your consent. The first time it happens, HotelXray asks you, and you can either fix it once or opt in to do it automatically from now on. No other cookies are touched, and nothing about your cookies is sent off your device.

How we use the data

We use the information described above to operate calendars and alerts, send service emails, manage accounts and subscriptions, prevent abuse, troubleshoot failures, understand product usage, and improve HotelXray. We do not sell personal information or use it for advertising.

Data retention

Feature usage event data is retained for up to 12 months and then deleted.

Account, alert, notification, referral, and subscription records are retained while needed to provide the service, resolve support or billing issues, meet legal obligations, and prevent fraud. You may request deletion by emailing [email protected]; some billing or transaction records may need to be retained where required by law.

Service providers

HotelXray does not use third-party advertising trackers. We use service providers only where needed to operate the product:

• Google Cloud hosts the HotelXray application and database.
• Resend delivers sign-in, alert, account, and billing emails.
• Stripe hosts checkout and billing management, processes payments, and sends subscription events to HotelXray. Stripe handles payment details under its own privacy policy.

These providers receive only the information needed to perform their services. We may also disclose information if required by law or to protect the rights, safety, and security of HotelXray, its users, or others.

Limited use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Affiliation

HotelXray is an independent tool and is not affiliated with, endorsed by, or sponsored by Hyatt Hotels Corporation. "Hyatt" and all related marks are trademarks of their respective owners.

Children's privacy

HotelXray is not directed at children under 13 and does not knowingly collect data from them.

Changes to this policy

We may update this policy as the extension evolves. The "Last updated" date at the top will reflect any changes. Continued use of the extension after changes constitutes acceptance of the updated policy.

Terms of Use

This Privacy Policy is part of, and should be read together with, our Terms of Use.

Contact

Questions? Email us at [email protected].