Privacy & Cookie Policy

Effective September 29, 2026

This policy explains how Corning Inn, 255 South Hamilton Street, Painted Post, NY 14870, collects and uses personal information when you use corninginnreservations.com, book a stay, contact us, or stay with us.

What we collect

When you book: your name, email address, phone number (if given), stay dates, number of guests, room choice and any requests you add. Card payments are handled by Stripe; we never receive or store your full card number.
If you create an account: your name, email address, phone number (if given) and a password, stored only as a secure hash. If you sign in with Google, we receive your name and email address from Google.
When you contact us: your name, email address and message.
Bookings made elsewhere: if you book through Booking.com, Expedia or another travel site, or by phone, we receive the reservation details from them or from you.
At check-in: the front desk may record details from a government-issued ID to verify who is staying.
Automatically: your IP address, used to protect the site against abuse (for example, limiting repeated sign-in attempts) and to tell whether to ask for cookie consent. With your consent where it is required, Google Analytics collects how the site is used — see Cookies.

How we use it

To take, confirm, change and cancel your reservation, and to send the related emails.
To provide your stay, answer your questions and handle payments and refunds.
To keep the records that tax, accounting and lodging laws require.
To keep the site and your account secure and prevent fraud.
With your consent where required, to understand how visitors use the site and improve it.

We do not sell your personal information, and we do not use it for advertising profiles.

Only the service providers that run the site and your booking, for those purposes:

Stripe — card payments and refunds.
Vercel — hosts this website.
Turso — stores the reservation database.
Our email service provider — delivers booking confirmations and replies.
Google — Google sign-in if you use it; Google Analytics and Tag Manager where allowed.
Booking.com, Expedia and other travel sites — only for reservations you made through them.

We may also disclose information when the law requires it.

Cookies and similar storage

Always on, because the site needs them:

Sign-in cookies (authjs.*) — keep you signed in to your account and protect sign-in forms. Only set if you sign in.
Two-step verification cookie (ci_admin_mfa) — remembers that this device passed two-step verification today.
Theme and cookie choice (stored in your browser, not sent to us) — your light/dark setting and your answer to the cookie banner.

Analytics, only with your consent where it is required:

Google Analytics (_ga, _ga_*, up to 2 years) — counts visits and pages viewed. Page addresses are cleaned before they are sent, so booking links and personal details are not included. Loaded through Google Tag Manager.

Visitors from the European Union, the European Economic Area, the United Kingdom, Switzerland and Canada are asked first, and analytics does not load until they accept. You can change your choice at any time: . You can also block cookies in your browser or install Google's Analytics opt-out add-on. The site does not respond to browser “Do Not Track” signals; use the cookie settings instead.

How long we keep it

Reservation and payment records are kept for as long as needed to provide your stay and then for as long as tax, accounting and legal obligations require. Account information is kept until you ask us to delete the account. Contact messages are kept while we deal with them and for a reasonable time afterwards.

Security and where it is stored

Information is sent over encrypted connections and stored with our providers in the United States. Passwords are stored only as hashes, and staff access requires two-step verification. If you are outside the United States, your information is transferred to and processed in the United States.

Your rights

You can ask us for a copy of your information, to correct it, or to delete it (unless we must keep it by law), and you can withdraw consent at any time. Depending on where you live you may have further rights:

Canada (PIPEDA; in Quebec, Law 25): access, correction, withdrawal of consent, and in Quebec, portability. You may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
EU, EEA, UK and Switzerland (GDPR, UK GDPR, FADP): access, correction, erasure, restriction, portability and objection. We rely on performing your booking, our legal obligations, our legitimate interest in running a secure site, and your consent for analytics. You may complain to your local data-protection authority (in the UK, the ICO).
California: you can review and request changes to your information by contacting us.

We will not treat you differently for exercising these rights.

Children

This site is not directed to children under 13, and we do not knowingly collect their information online. Guests must be at least 21 years old to check in.

Contact

For any privacy question or request, contact Corning Inn management, who is responsible for personal information at the inn:

Email: notifications@corninginnreservations.com
Phone: (607) 937-5383
Mail: Corning Inn, 255 South Hamilton Street, Painted Post, NY 14870, USA

Changes to this policy

We will post any change on this page and update the effective date above. See also our booking policies, shown before you complete a reservation.