Privacy Policy

Last updated: June 7, 2026

HotelXray ("the extension") is a Chrome and Firefox browser extension that overlays award and cash availability data on Hyatt hotel pages. This policy explains what data we collect and how we use it.

What we collect

HotelXray collects limited, anonymous usage data to improve the service:

• Feature usage events — anonymous signals about how the extension is used: which hotel page you are viewing, the calendar month and dates you look at, when you toggle a metric (Points, Cash, CPP, SUA), switch room types, change currency, or refresh. We use these in aggregate to improve the product and to surface popular hotels and dates to users. No identifying information is attached.

We do not collect your name, email address, Hyatt account details, payment information, or any other personally identifiable information.

How HotelXray fetches availability data

HotelXray runs only on Hyatt's website (hyatt.com). It has no access to, and cannot read, any other website you visit.

HotelXray reads the award and cash availability already present on the Hyatt pages you visit and displays it in the side panel. To do this, it requests current availability from Hyatt for the dates you are looking at:

• When you open a hotel or view a calendar month, HotelXray loads availability for those dates. If data it loaded earlier has become stale, it refreshes it automatically.
• When you manually refresh the calendar, it re-fetches the latest availability.
• To make the experience faster, HotelXray also prefetches availability for a small, bounded set of hotels it has shown you (such as similar hotels nearby), including nearby dates around your stay — so that when you navigate to them, the data is already filled in. This prefetching is limited to hotels you have actually viewed or been shown in the panel, happens only after a brief pause in your activity, and exists solely to optimize your experience.

HotelXray acts only as a personal companion to your own browsing. Every request it makes — automatic calendar loads, refreshing stale dates, manual refreshes, and preparing the related hotels it has shown you — is tied to your current session and your own activity, and exists only to display information to you. It requests data only for hotels you are actively viewing or that it has shown you in the panel. It does not crawl or systematically harvest Hyatt's website, does not browse hotels on its own initiative, and does not fetch or collect data on behalf of anyone other than you. Any background loading (such as preparing nearby hotels you have been shown) is a limited convenience scoped to your session, never a standing process that runs against hotels you have not viewed.

Your Hyatt account and cookies

HotelXray does not require you to log in to Hyatt, and it works without any Hyatt account. It does not read your Hyatt login, password, account credentials, profile, or payment details.

HotelXray does not read the contents of your cookies or any data stored in them. The only cookie operation it ever performs is the consent-based session-recovery fix described below, which removes Hyatt's session cookies to clear the blank-page bug — it never reads their values, and no cookie data is sent off your device.

Local storage

Your preferences — such as selected room type, visible metrics, currency, and tax toggle — are saved locally in your browser using chrome.storage. This data never leaves your device.

The extension also generates a random identifier (UUID) per installation to associate events from the same device. This ID is not linked to your identity and cannot be used to identify you personally.

Session recovery

Hyatt's website has a long-standing bug where its pages sometimes render blank in Chrome. Clearing the site's session cookies and reloading is a common, well-known remedy for this kind of blank-page issue. When HotelXray detects the problem, it can apply this fix by clearing Hyatt's session cookies and reloading — but only with your consent. The first time it happens, HotelXray asks you, and you can either fix it once or opt in to do it automatically from now on. No other cookies are touched, and nothing about your cookies is sent off your device.

How we use the data

Anonymous usage events are sent to HotelXray's servers (api.hotelxray.app) solely to understand how the extension is used and to improve the product. We do not sell, share, or monetize this data with third parties.

Data retention

Anonymous event data is retained for up to 24 months and then deleted.

Third parties

HotelXray does not use third-party analytics services, advertising networks, or trackers. All data is sent only to api.hotelxray.app, which we operate.

Limited use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Affiliation

HotelXray is an independent tool and is not affiliated with, endorsed by, or sponsored by Hyatt Hotels Corporation. "Hyatt" and all related marks are trademarks of their respective owners.

Children's privacy

HotelXray is not directed at children under 13 and does not knowingly collect data from them.

Changes to this policy

We may update this policy as the extension evolves. The "Last updated" date at the top will reflect any changes. Continued use of the extension after changes constitutes acceptance of the updated policy.

Terms of Use

This Privacy Policy is part of, and should be read together with, our Terms of Use.

Contact

Questions? Email us at hello@hotelxray.app.