Homebase Privacy Policy

Effective Date: April 21, 2026

This Privacy Policy explains how Kuma Games Inc. ("Homebase," "we," "us," or "our") collects, uses, discloses, and protects information when you access or use homebase.rest and related websites, services, applications, and hosted experiences (collectively, the "Services"). By using the Services, you acknowledge the practices described in this Privacy Policy.

1. Scope

This Privacy Policy applies to information we collect from: - visitors to our website; - Hosts who create, manage, or access Homebase accounts; - guests and other end users who access Homebase-powered property pages or welcome experiences; - individuals who contact us, request support, or otherwise interact with us.

This Privacy Policy does not apply to third-party websites, platforms, or services that are linked to from the Services or integrated with the Services but governed by their own privacy policies.

2. Information We Collect

We may collect the following categories of information.

A. Information you provide directly

Depending on how you use the Services, you may provide: - name; - email address; - account login details; - property details; - guest-facing content and instructions; - check-in and stay information; - photos, media, or uploaded materials; - communications you send to us; - billing-related contact details if paid services are offered.

B. Authentication and account information

If you sign in or register using supported authentication methods, we may collect information such as: - your name; - email address; - account identifier from the authentication provider; - profile details made available to us by the provider, subject to your settings and the provider's policies.

C. Property and service data

When Hosts use Homebase, we may collect and store information associated with properties, pages, and account activity, including: - property names and codes; - page settings and content; - guest access configurations such as links, property codes, or PINs; - dashboard actions and content edits; - preview and publishing status; - service configuration data.

D. Guest-facing usage data

When guests or end users access Homebase-powered pages, we may collect: - page request information; - device and browser information; - approximate geolocation inferred from IP address; - timestamps and access logs; - usage events, navigation data, and page interactions; - referrer URLs; - access-related information such as submitted property codes or PINs.

E. Payment and billing information

If paid plans or subscriptions are enabled, payment information may be processed by a third-party payment processor such as Stripe. We generally do not store full payment card numbers on our own systems. We may receive limited billing-related information such as: - customer ID; - subscription status; - billing plan; - invoice/payment status; - billing address or contact details, depending on integration settings.

F. Automatically collected technical information

We may automatically collect: - IP address; - device identifiers; - browser type and version; - operating system; - session data; - log data; - cookies and similar technologies; - diagnostics, performance, and error data.

3. How We Use Information

We may use information for the following purposes: - to provide, operate, maintain, and improve the Services; - to create and manage accounts; - to authenticate users and secure access; - to host and display guest-facing property pages; - to process and fulfill transactions, subscriptions, and account administration; - to respond to support requests and communications; - to monitor usage, debug issues, and improve performance; - to detect, prevent, and investigate fraud, abuse, security incidents, and policy violations; - to develop new features and functionality; - to comply with legal obligations; - to enforce our Terms and protect our rights, users, and the public.

4. Legal Bases for Processing (if applicable)

If you are located in the EEA, UK, or another jurisdiction requiring a lawful basis, we process personal data under one or more of the following bases: - performance of a contract; - legitimate interests; - consent; - compliance with legal obligations.

Our legitimate interests may include operating the Services, improving the product, securing our systems, preventing misuse, supporting customers, and developing our business.

5. Cookies and Similar Technologies

We may use cookies, local storage, session storage, pixels, analytics tags, and similar technologies to: - keep users signed in; - remember preferences; - maintain sessions; - understand usage and performance; - improve security; - analyze traffic and engagement.

You can usually control cookies through your browser settings. However, disabling cookies or storage technologies may affect Service functionality.

If you want, this section can later be expanded into a more detailed Cookie Notice.

6. How We Share Information

We may share information in the following circumstances:

A. Service providers

We may share information with vendors and service providers who help us operate the Services, such as: - cloud hosting and infrastructure providers; - database and storage providers; - authentication providers; - analytics, monitoring, and logging providers; - payment processors; - customer support or communications providers.

These providers may access information only as needed to perform services for us, subject to contractual or legal safeguards where applicable.

B. Public or intended audience sharing

Information that Hosts choose to publish or make accessible through guest-facing property pages may be displayed to intended recipients, including guests and other persons who receive valid access links, property codes, or PINs.

C. Business transfers

We may disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction.

D. Legal and safety disclosures

We may disclose information if we believe doing so is necessary to: - comply with law, regulation, legal process, or government request; - enforce our agreements and policies; - protect the rights, safety, security, and property of Homebase, our users, or others; - detect, investigate, or address fraud, abuse, or security issues.

E. With consent

We may share information with your consent or at your direction.

7. Data Retention

We retain information for as long as reasonably necessary to: - provide the Services; - maintain accounts and hosted content; - comply with legal, tax, accounting, or regulatory obligations; - resolve disputes; - enforce our agreements; - maintain security, backup, and fraud-prevention records.

Retention periods may vary depending on the type of data, how it is used, and legal requirements. We may retain certain information in backups, logs, or archived systems for a limited period after deletion.

8. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no security measure is perfect, and we cannot guarantee absolute security. You are responsible for safeguarding your own credentials and for using the Services in a secure manner.

9. International Data Transfers

Your information may be stored and processed in countries other than your own, including the United States or other jurisdictions where we or our service providers operate.

Where required by law, we use appropriate safeguards for cross-border transfers.

10. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including the right to: - access personal information we hold about you; - request correction of inaccurate information; - request deletion of certain information; - object to or restrict certain processing; - request portability of certain information; - withdraw consent where processing is based on consent; - lodge a complaint with a supervisory authority.

To exercise these rights, contact us at info@homebase.rest. We may need to verify your identity before processing certain requests.

11. California Privacy Notice (if applicable)

If you are a California resident, you may have rights under California law, including rights to know, access, delete, and correct certain personal information, subject to exceptions.

Homebase does not sell personal information in the traditional sense for money. If Homebase later engages in data-sharing activities that trigger California "sharing" obligations for cross-context behavioral advertising, this section should be updated accordingly.

California residents may contact us at info@homebase.rest to exercise applicable rights.

12. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps.

If a different age threshold applies in your jurisdiction, this section should be adjusted accordingly.

13. Host Responsibilities for Guest Data

If you are a Host and use the Services to create or share guest-facing experiences, you are responsible for ensuring that: - you have the right to collect, use, and disclose any personal information you provide through the Services; - your notices to guests are accurate and legally sufficient; - your use of the Services complies with applicable privacy, consumer protection, landlord-tenant, hospitality, and short-term rental laws.

Homebase generally acts as a service provider or processor for Host-provided guest content and data where applicable, while Hosts remain responsible for their own relationship with guests and end users.

14. Third-Party Services and Links

The Services may contain links to third-party websites or rely on third-party services such as authentication providers, payment processors, and infrastructure providers. We are not responsible for the privacy practices of those third parties.

We encourage you to review their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version and revise the Effective Date. If changes are material, we may provide additional notice as required by law.

Your continued use of the Services after the effective date of the updated Privacy Policy constitutes your acknowledgment of the revised policy.

16. Contact Us

If you have questions, concerns, or privacy requests, contact us at:

Kuma Games Inc. info@homebase.rest