Privacy Policy

Data and purposes

We process your chosen rental locations, budget, home preferences, language, notification settings, and inbox choices. Connecting Telegram provides the account and chat identifiers needed to authenticate you and deliver service messages. We use account, session, delivery, and technical records to operate and protect the Service, troubleshoot failures, and handle support requests.

Stripe handles payment details on its hosted pages. We use Stripe customer, subscription, and transaction references and payment status to manage access and billing. Stripe may request billing contact and tax information. Hey Haven does not require an email address to register and does not request passports, bank statements, employment contracts, or rental application documents.

We process information necessary to perform the service contract, comply with applicable legal obligations, and pursue legitimate interests in security and service reliability, subject to your rights. Optional analytics requires your consent, which you can withdraw at any time.

Cookies and browser storage

We currently use functional cookies and local storage for access and preferences. Google Analytics loads only after you choose Allow analytics. Necessary only keeps analytics disabled; it is not consent to optional tracking. Google processes browser, device, visit and connection information to provide usage reports. We send only a fixed homepage URL without query strings, Telegram identifiers, search criteria or payment details. Advertising features are disabled. You can withdraw consent through Cookie preferences on the homepage to stop collection and clear GA cookies. Previously collected data is not automatically deleted. Google may process data outside the EEA under applicable transfer safeguards. See how Google uses information.

The haven_session cookie keeps you authenticated and expires at the session expiry, normally 30 days after creation, or is cleared on sign-out. The short-lived haven_device_binding cookie ties a Telegram browser-confirmation attempt to that browser; it expires with the login attempt and is cleared on completion or cancellation.

Local storage keeps language preferences (haven-ui:v1) until changed or cleared, search drafts (haven-search-draft:v1) for up to seven days, and your analytics preference (haven-cookie-preferences:v2) for up to 180 days. Analytics cookies (_ga and _ga_*) expire after 180 days. Storage expiry means the app stops using an expired record; you may also clear site data in your browser. Blocking necessary storage may prevent login or saving preferences. Reopen the explanation using “Cookie preferences” in the homepage footer.

The website loads Google Fonts, which makes requests to Google and may expose technical information such as your IP address. Telegram and Stripe operate their own services and privacy policies; their websites or apps may use their own cookies. See Google, Telegram, and Stripe privacy information.

Retention and your choices

Search and account data is retained while needed to provide the Service. You may pause notifications, edit your search, and request account deletion using Search settings. Deletion may not remove records that must be retained for applicable legal, accounting, dispute, or security purposes; retained information is limited to that purpose. Telegram messages already delivered and third-party records are subject to the relevant provider’s controls.

Where applicable, you may request access, correction, deletion, restriction, portability, or object to processing, and complain to a competent data-protection authority. For privacy requests or questions, send /paysupport followed by your request to the Telegram bot linked to your account. Keep the returned reference number for follow-up.