Spann Stays · privacy
Use sample data only.
Spann Stays is a fixture-backed demonstration. It does not need or store a real traveler profile to return its bounded sample results.
Data minimization
Do not send real names, email addresses, phone numbers, payment information, government identifiers, loyalty numbers, health information, or free-text requests about a real person. A legacy traveler packet remains accepted for protocol compatibility, but its values do not affect the fixture decision and are removed from responses.
Processing and logging
Requests are processed in memory. Application logs contain a random request ID, HTTP method, route, response status, and request byte count. They exclude request and response bodies, tool arguments, session values, Origin values, and IP addresses. Session state expires after 30 minutes of inactivity; abuse-control counters expire after 60 seconds.
Retention and requests
The application creates no traveler database. Metadata-only application logs are retained for no more than 30 days for reliability and abuse investigation. Infrastructure providers may retain standard network metadata under their own operational policies.
Report a privacy concern to hello@spannhq.com without including request bodies, session IDs, or personal data.
Back to Spann Stays