Privacy Policy

Last updated: April 14, 2026

1. Who We Are

Palma is an all-inclusive resort discovery platform operated by Skolara ("we," "us," or "our"). Our website is located at palma.skolara.dev. If you have questions about this policy, contact us at support@skolara.dev.

2. Information We Collect

Information you provide directly

  • Account registration details (email address, display name)
  • Resort stay details you log (resort name, dates, room type, travel party)
  • Ratings and written reviews you submit
  • Photos you upload to the platform

Information collected automatically

  • Log data: IP address, browser type and version, pages visited, timestamps
  • Device information: device type, operating system
  • Cookies and similar tracking technologies (see Section 5 below for full details)

Information from third parties

  • If you sign in using a third-party service (such as Google), we receive basic profile information (name, email) from that provider in accordance with your privacy settings there

3. How We Use Your Information

  • To create and manage your Palma account
  • To display your stay history, ratings, and photos on your profile and on resort pages
  • To improve resort discovery and recommendation quality
  • To send transactional emails (account confirmation, password reset)
  • To detect and prevent fraud or abuse of the platform
  • To comply with legal obligations

We do not sell your personal information to third parties.

4. Affiliate Links & Third-Party Tracking

Palma earns commissions through affiliate partnerships with resort brands. When you click a "Book Direct" button on Palma, you may be directed to a resort's website through an affiliate tracking link. These links allow our affiliate partners to record that your visit originated from Palma so that we can receive a commission if you complete a booking.

Commission Junction (CJ Affiliate) is one of the affiliate networks we use. When you click an affiliate link on Palma, CJ may set a cookie on your browser to track whether a qualifying transaction occurs. This cookie typically remains active for 30–90 days depending on the specific advertiser's program terms. CJ's tracking technology collects data such as your browser type, IP address, referring URL, and transaction details. This data is governed by CJ's Privacy Policy.

Affiliate relationships do not influence resort rankings, community ratings, or editorial content on Palma. We only feature resorts that meet our quality standards.

5. Cookies & Tracking Technologies

Palma uses cookies and similar technologies for the following purposes:

TypePurposeCan opt out?
EssentialKeeping you logged in, security tokensNo — required for the site to function
Affiliate trackingRecording clicks on "Book Direct" links so we can earn commissionsYes — see opt-out instructions below
AnalyticsUnderstanding how visitors use the site to improve itYes — see opt-out instructions below

To opt out of affiliate tracking cookies: You can block or delete cookies in your browser settings. Note that doing so will not affect your ability to use Palma, but it means we will not earn a commission if you book a resort — which is how we keep Palma free. You can also opt out of CJ tracking at cj.com/opt-out.

6. How We Share Your Information

We share your information only in the following circumstances:

  • Affiliate networks (CJ Affiliate, others): Click data and transaction data as described in Section 4
  • Infrastructure providers: Supabase (database and authentication), Vercel (hosting), OpenAI (photo content moderation) — each bound by their own privacy and data processing agreements
  • Legal requirements: If required by law, court order, or to protect the rights and safety of Palma or our users
  • Business transfer: If Palma or Skolara is acquired or merges with another entity, your information may be transferred as part of that transaction

7. Data Retention

We retain your account information and stay history for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention records). Aggregate, anonymized data derived from your activity may be retained indefinitely.

8. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information in your account
  • Delete your account and associated personal data
  • Export your stay history and ratings in a portable format
  • Opt out of non-essential cookies and affiliate tracking

To exercise any of these rights, email us at support@skolara.dev. We will respond within 30 days.

9. Children's Privacy

Palma is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at support@skolara.dev and we will delete it promptly.

10. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), Supabase row-level security on all data, and hashed authentication credentials. No system is completely secure, and we cannot guarantee absolute security. We will notify you of any breach that materially affects your personal information in accordance with applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Palma after changes take effect constitutes acceptance of the revised policy.

12. Contact

For any privacy-related questions or requests, contact us at support@skolara.dev.