How we protect your booking

You type your card into a secure field run by Stripe, the payment processor. It is Stripe’s page inside ours, so your card number goes straight to them. We never see or store your card number.

We keep what a booking needs: names, contact details and what you asked the hotel for. It is encrypted on our servers and in every backup.

No advertising trackers and no tracking cookies. Our visit counts never store your IP address and are never joined to a booking. Privacy policy

You sign in with a link we email you. There is no password to steal or reuse, and each link works once. We store only a scrambled copy of it, never the link itself.

Our team signs in with a passkey tied to their own device, as well as by email. Every action we take on a booking is logged, and the log is sealed every day so it cannot be changed without it showing.

We have assessed ourselves against the NIST Cybersecurity Framework 2.0, follow a written security policy and incident plan aligned to it, and review them every six months.

Two free, independent scanners will test our site for you right now:

• Mozilla Observatory grades the protections our pages send to your browser.
• Qualys SSL Labs grades the encryption between your browser and us.

We aim to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at level AA: we build every page to work with a keyboard and a screen reader, with text that stays readable in light and dark. If anything gets in your way, tell us and we will fix it.

Email help@njstravel.com and a person will read it. Security researchers can find the same address in our security.txt.