Privacy Policy

How OTA Ninja handles payout files, payments, support messages and basic website data.

1. Payout files stay on your device

Your supported GetYourGuide invoice files, Payment Confirmation spreadsheet and optional Payment Confirmation PDF are read by code running in your browser. The payout-file contents are not intentionally sent to OTA Ninja, Stripe, Cloudflare, Brevo or another server, and OTA Ninja does not keep a server copy.

OTA Ninja does not ask for your GetYourGuide login, bank login or full bank statement. You manually enter the bank amount received and, when relevant, the bank currency, known transfer fee and reference commission rate.

2. Payment information

Paid checks use Stripe Checkout. Stripe processes the payment details needed to complete the purchase. Depending on the payment method, Stripe may process information such as your name, email address, billing details, payment method information, IP address, device/browser information and transaction data.

OTA Ninja may receive limited payment information from Stripe, such as your email address, amount paid, payment status, transaction or Checkout reference, refund status and information needed to verify your paid access. OTA Ninja does not receive or store your full card number.

3. Paid-access browser storage

After successful payment, OTA Ninja stores a signed paid-access token in your browser so the review remains available during the 24-hour access window. After the first completed diagnosis, the browser also stores a local SHA-256 fingerprint of the Payment Confirmation spreadsheet so that the purchase remains linked to the same payout period. These access-control records do not contain the spreadsheet or PDF contents, and the local payout fingerprint is not sent to OTA Ninja.

If you clear browser data, use private/incognito browsing, change browser or move to another device, that local access record may be lost. If that happens, contact support and we can verify the payment and restore access where appropriate.

4. Website hosting and security

OTA Ninja uses Cloudflare for domain, DNS, website delivery, security and email routing. When you visit the site, Cloudflare may process normal internet and security data such as IP address, browser/device information, request timing and routing/security metadata needed to deliver and protect the website.

These website-delivery records are separate from the payout files you select inside the checker.

5. Support email

Messages sent to support@otaninja.com are routed through Cloudflare to our support inbox. Outgoing support replies are sent through Brevo. Those providers may process the sender and recipient addresses, email content and delivery/event metadata needed to route and deliver the message.

Please do not email full GetYourGuide payout files or bank statements. If a sample file is ever needed to investigate a technical problem, we will explain what is required and provide an appropriate method.

6. Cookies, local storage and analytics

OTA Ninja does not currently use advertising pixels or behavioural analytics on the checker. We may use necessary browser storage for paid access and essential site functionality.

Stripe uses cookies and similar technologies on its payment services for functions including payment processing, security, authentication and fraud prevention. Stripe may also provide its own cookie choices where required. Cloudflare may use necessary security technologies in connection with site delivery. OTA Ninja will review the final live payment implementation before launch and will add a consent banner if the actual configuration or applicable law requires one.

The site currently loads web fonts from Google Fonts, which means a visitor's browser may make a connection to Google to retrieve those font resources.

7. Why we use personal information

• To provide and verify paid access to the service.
• To process payments, receipts, refunds and duplicate-charge corrections.
• To answer support requests.
• To prevent fraud, abuse and unauthorised access.
• To operate, secure and troubleshoot the website.
• To keep accounting, tax, dispute and legal records where required.

8. Retention

Payout files selected in the checker are not retained by OTA Ninja. The paid-access token expires after the 24-hour review window. The local payout binding is cleared when paid access is cleared or replaced by a new purchase.

Payment records are retained by Stripe and by OTA Ninja as necessary for payment administration, accounting, tax, fraud prevention, refunds and disputes. Support email correspondence and delivery records may be retained for as long as reasonably needed to answer the request, maintain business records, prevent abuse or meet legal obligations. Third-party providers also apply their own retention rules.

9. Service providers and international processing

OTA Ninja currently relies on Cloudflare for domain, website delivery/security and inbound email routing; Stripe for payment processing; and Brevo for outbound support email delivery. These providers may process data in countries outside your own under their own privacy terms and applicable data-protection arrangements.

OTA Ninja does not sell your personal information or your GetYourGuide booking data.

10. Your choices and rights

You can choose not to provide optional information. Depending on where you live, you may have rights to ask about, access, correct or delete personal information that OTA Ninja holds about you, subject to legal record-keeping requirements.

11. Contact

Email: support@otaninja.com

Provider privacy information: Stripe · Cloudflare · Brevo