Privacy policy
17 October 2026.
1. What this page covers
This page describes the personal data this website handles when you read a place, request a stay, sign in, or send a message.
2. Contact
Privacy questions go to [email protected].
3. Data we collect
If you create an account, we store your email in a form we can look up for sign-in. When you provide them, your name, phone number, country, passport number, and date of birth are stored encrypted at rest. A Google sign-in can also store the name and profile photo Google sends for that account. Places you mark as favorites are stored on that account.
A stay request stores the place, the room, the dates, the number of guests, any note you write, and the rate quoted at that moment. It also stores whether the request is waiting, confirmed, declined, or cancelled. Feedback you leave after a stay stores a star rating and the text you write with that stay.
If you tick the box that allows publication when you leave feedback, that rating and text may appear on the public Nomad Albania website. If you leave the box unticked, the feedback stays with your stay for the house and for your account, and is not published on the public site.
A message from Contact, Help, or your account stores your name, email, and the text. If you are signed in and you have a current or upcoming stay, a Help message also includes that place, room, and those dates.
We do not take a card on these forms, and we do not store a card number.
4. Sign-in
You can sign in with Google. Google then shares the email, name, and profile photo of the account you choose. We use that to recognise you on a later visit. We do not receive your Google password.
You can also sign in with a link sent to your email. We use that address to send the link and to match the account.
A cookie keeps you signed in on this browser. It is a session cookie for this site, not an advertising cookie.
5. Why we use it
We use the account and the request so the house can confirm or decline the stay, and so you can see and update that request on your account.
We use a message so the house can reply.
We use the sign-in cookie so you do not have to identify yourself on every page.
6. Maps
When a house has an address, the page can show a Google map of that place. The home page and the search page can show a map of the houses. Loading a map sends a request to Google.
Google handles that request under its own terms.
7. Email
Sign-in links and replies are sent by email through Resend. The message contains the address and the text needed to deliver it.
About one day after a confirmed stay ends, we may email you a link asking for feedback on that stay.
8. Cookies and analytics
This site runs Google Analytics (measurement ID G-3GXNDZQHEM) to understand how the public pages are used. Google may set cookies or similar identifiers for that measurement. We use that information to improve the site, not to sell a guest list.
The sign-in cookie is described above. While you fill in a request, another cookie holds those dates for 10 minutes so someone else cannot take them. It is removed when you leave the page, when the 10 minutes end, or when the request is sent.
9. Who else receives data
The house that receives the request can read the details of that stay.
Google receives the sign-in you start, the map request when a map loads, and Analytics events from the public pages.
Resend receives the email we ask it to send.
We do not sell the list of guests or messages.
10. How long we keep it
A stay request stays available so the house can decide it and so you can see it in My stays. A message stays available so it can be answered.
You can ask us to delete an account or a message at [email protected].
11. Your rights
You can ask for a copy of the data this site holds about you, ask for a correction, or ask for deletion, by writing to [email protected].
12. Security
Access to stay requests and messages is limited to the people who operate this site and the house the request is for. Sign-in does not use a password stored on this site.
Write to [email protected] if you think an account is being used without you.
13. Children
This site is not directed at children, and we do not knowingly collect their data. If you believe a child has sent a request or a message, write to [email protected] and ask us to delete it.
14. Changes
When this page changes, the date at the top changes with it. The version you are reading is dated 17 October 2026.