Privacy Policy

How OTA Ninja handles payout files, payments, support messages and basic website data.

1. Payout files stay on your device

Your supported GetYourGuide invoice files, Payment Confirmation spreadsheet and optional Payment Confirmation PDF are read by code running in your browser. The payout-file contents are not intentionally sent to OTA Ninja, Stripe, Cloudflare, Brevo or another server, and OTA Ninja does not keep a server copy.

OTA Ninja does not ask for your GetYourGuide login, bank login or full bank statement. You manually enter the bank amount received and, when relevant, the bank currency, known transfer fee and reference commission rate.

2. Payment information

Paid checks use Stripe Checkout. Stripe processes the payment details needed to complete the purchase. Depending on the payment method, Stripe may process information such as your name, email address, billing details, payment method information, IP address, device/browser information and transaction data.

For access verification, OTA Ninja's Cloudflare server function sends the Stripe Checkout Session reference to Stripe and checks the payment status, the expected $9 USD amount, the expected Stripe Price ID and the successful-payment time. This verification is used to issue a signed 24-hour access token. OTA Ninja does not operate its own customer-payment database for this access check and does not receive or store your full card number. Stripe retains the transaction information under its own systems and policies.

3. Paid-access browser storage

After successful payment, OTA Ninja stores a signed paid-access token in your browser's local storage so the review remains available during the 24-hour access window. The token contains access-control information such as the Stripe Checkout Session reference, the price identifier and issue/expiry times; it does not contain payout-file contents. After a complete diagnosis, the browser also stores a local SHA-256 fingerprint of the Payment Confirmation spreadsheet so that paid check remains linked to the same payout period. Multiple unexpired paid checks can be stored separately in the same browser. The payout fingerprints are not sent to OTA Ninja.

If you clear browser data, close a private/incognito browsing session, change browser or move to another device, those local access records may be lost. If the original 24-hour window is still open, support can provide reasonable recovery help after the payment is verified. The access window is not automatically extended solely because local browser storage was removed.

4. Website hosting and security

OTA Ninja uses Cloudflare for domain, DNS, website delivery, security and email routing. When you visit the site, Cloudflare may process normal internet and security data such as IP address, browser/device information, request timing and routing/security metadata needed to deliver and protect the website.

These website-delivery records are separate from the payout files you select inside the checker.

5. Support email

Messages sent to [email protected] are routed through Cloudflare to our support inbox. Outgoing support replies are sent through Brevo. Those providers may process the sender and recipient addresses, email content and delivery/event metadata needed to route and deliver the message. Brevo can also maintain transactional delivery logs and email previews according to the account's retention and tracking settings.

Please do not email full GetYourGuide payout files or bank statements. If a sample file is ever needed to investigate a technical problem, we will explain what is required and provide an appropriate method.

6. Cookies, local storage and analytics

OTA Ninja does not currently use advertising pixels or behavioural analytics on the checker. Paid access uses browser local storage for the signed access record and local payout binding; this storage is used to provide the paid service rather than to track advertising behaviour.

When you choose to pay, you leave OTA Ninja for Stripe-hosted Checkout. Stripe uses cookies and similar technologies on its own payment services for payment processing, security, authentication, fraud prevention and related functions, and Stripe provides its own privacy/cookie controls where applicable. Cloudflare may use necessary security technologies in connection with site delivery. OTA Ninja does not currently set its own advertising or behavioural-analytics cookies. If non-essential analytics or marketing technologies are added later, this policy will be updated and consent controls will be used before activation where applicable law requires them.

The site currently loads web fonts from Google Fonts, which means a visitor's browser may make a connection to Google to retrieve those font resources.

7. Why we use personal information

• To provide and verify paid access to the service.
• To process payments, receipts, refunds and duplicate-charge corrections.
• To answer support requests.
• To prevent fraud, abuse and unauthorised access.
• To operate, secure and troubleshoot the website.
• To keep accounting, tax, dispute and legal records where required.

8. Retention

Payout files selected in the checker are not retained by OTA Ninja. The paid-access token expires after the 24-hour review window. The local payout binding is cleared when paid access is cleared or replaced by a new purchase.

Payment records are retained by Stripe and by OTA Ninja as necessary for payment administration, accounting, tax, fraud prevention, refunds and disputes. Support email correspondence and delivery records may be retained for as long as reasonably needed to answer the request, maintain business records, prevent abuse or meet legal obligations. Third-party providers also apply their own retention rules.

9. Service providers and international processing

OTA Ninja currently relies on Cloudflare for domain, website delivery/security and inbound email routing; Stripe for payment processing; Brevo for outbound support email delivery; and Google for delivery of the web-font files used by the site. These providers may process normal network, payment or email data in countries outside your own under their own privacy terms and applicable data-protection arrangements.

OTA Ninja does not sell your personal information or your GetYourGuide booking data.

10. Your choices and rights

You can choose not to provide optional information. Depending on where you live, you may have rights to ask about, access, correct, delete or restrict the use of personal information that OTA Ninja holds about you, subject to legal record-keeping requirements. Requests can be made at [email protected]. We may ask for enough information to verify that the request relates to you before acting on it. Our Security & Data page summarises the measures used to keep payout-file analysis separate from payment and support systems.

11. Contact

Email: [email protected]

Provider privacy information: Stripe · Cloudflare · Brevo · Google Fonts is delivered by Google under Google's privacy terms.