Data deletion

If one of your public Instagram posts was found by our post discovery (currently through RecentReborn, a third-party service), we may hold a record of that post: its link and ID, when it was posted, the source, which of our sites and which location found it, the label we gave it and whether it was sent to our team. Our server also keeps copies of the messages that sent its link to our team. Both are deleted automatically after 30 days; after that only a one-way code made from the post’s link remains, until 90 days, and then nothing. We don’t store captions, usernames, photos, videos, thumbnails or the full responses from RecentReborn.

To have it deleted sooner, email hello@playaflamingo.com with the subject “Data deletion request” and the link to each post (for example https://www.instagram.com/p/…). Because we don’t store usernames, the post links are how we find the records. We will delete the records and one-way codes we hold for those posts, remove those posts from our server’s stored copies of the messages, and reply to confirm within 30 days.

The schedule and steps above cover what our own server keeps. Messages already delivered to our team through iMessage (via Photon) or Telegram stay under those services’ own storage, retention and deletion controls; we don’t control those copies and can’t guarantee their removal there.

We don’t use these posts to send their posters direct messages or private sales offers.

Visitors never sign in to PlayaFlamingo.com with Facebook or Instagram, so we hold no data from visitors’ Facebook or Instagram accounts.

If you emailed us and want that correspondence deleted, reply to the conversation or email hello@playaflamingo.com from the same address, and we will delete it and confirm within 30 days.

• Your Instagram posts themselves. They live on Instagram, under your control.
• Data held by Meta, Google, Viator, Vercel, WhatsApp, or the service providers our Instagram post discovery uses (RecentReborn, Photon, Apple iMessage and Telegram), including messages already delivered through iMessage or Telegram. Each keeps its own records under its own privacy policy; ask them directly (for example Meta’s Privacy Center).
• Google Analytics visits.These are tied to a random cookie ID, not to your name, so we have no way to find your visits. Clearing this site’s cookies starts a new ID.
• Conversations with us. They happen directly in your own WhatsApp, text or email app, not on this website. Ask us in the same conversation.