What we know about you, and why.

Who we are

100 Acre Wood Finger Lakes LLC, 1894 W Danby Road, Newfield, New York 14867. For anything in this policy, write to info@100acrewoodny.com.

What we collect

Only what you type into one of our forms:

• When you book — your name, email, phone number, dates, the number of guests, and any notes you add.
• When you contact us or ask about a retreat — your name, email, phone number, and your message. For retreats, also your group size and the shape of your dates.
• When you subscribe to the letter — your email address, and the date and network address you subscribed from, so we can show consent if it is ever questioned.
• When you create an account — your name, email, and a password we store only as a one-way cryptographic hash. We cannot read your password.

We do not ask for, and never store, card numbers. If we take a payment it is handled entirely by Stripe, and the card details go from your browser to Stripe without passing through our systems.

SMS text communications and compliance

If you choose to provide your phone number and opt in to receive text messages from us, the following terms apply in accordance with mobile carrier regulations:

• Usage: We use SMS messaging primarily for transactional and informational purposes, such as sending arrival instructions, door access codes, property updates, and answering your direct customer service questions.
• Opt-In Consent: By providing your mobile phone number on our booking forms or contact widgets, you explicitly consent to receive text messages from us. SMS opt-in consent and data are entirely isolated from third-party sharing.
• Text STOP to Opt-Out: You can cancel the SMS service at any time. Simply reply STOP to any text message we send you. After you send the SMS message STOP, we will send you an SMS message to confirm that you have been unsubscribed.
• Text HELP for Support: If you are experiencing issues with our messaging program, you can reply with the keyword HELP for more assistance, or contact us directly at [Your Support Email Address].
• Carrier Rates: As required by mobile networks, message and data rates may apply for any messages sent to you from us and to us from you. Message frequency varies based on your booking activity and interaction level.

Third-Party Sharing Restrictions (Strict SMS Protection)

We do not sell, rent, or lease our customer lists to third parties.
Strict Mobile Data Protection: Notwithstanding any other provision in this Privacy Policy, no mobile numbers, phone data, or specific SMS opt-in consent information collected through our website or booking platforms will be shared, sold, rented, or leased with third parties, affiliates, or partners for marketing or promotional purposes.

Cookies, and what this site does not do

This site sets three cookies, all of them first-party, and every one only after you deliberately submit something:

• aw_guest — keeps you signed in to your guest account for 30 days.
• aw_admin — keeps innkeepers signed in to the admin for 12 hours.
• aw_gate — remembers that you entered the access password while the site is closed for maintenance, for 12 hours.

Simply reading a page sets no cookie at all. There is no advertising cookie, no analytics cookie, and no third-party cookie of any kind. There is no Google Analytics, no Meta pixel, no tag manager, and no session recorder on this site. Our fonts are served from our own server, so loading a page tells no one else that you were here.

That is why you have not been shown a cookie banner. There is nothing here to consent to. If we ever add analytics or a payment provider that sets its own cookies, we will update this section and ask you first where the law requires it.

Who else sees it

Only the services that make the place run:

• Railway — hosts the site and the database.
• Resend — delivers our booking confirmations and other emails.
• Stripe — processes card payments, where payments are enabled.
• Anthropic — where the innkeepers use the AI assistant built into our admin to help with day-to-day work, booking details may be sent to that model to answer the question at hand. It is not used to train models.

We do not sell your information, we do not share it for anyone else's advertising, and we do not hand it to third parties for their own purposes. We will disclose it if the law genuinely requires it.

How long we keep it

Booking and tax records are kept for as long as New York and Tompkins County require us to keep them, which is currently several years. Contact messages and retreat enquiries are kept while they are useful and then deleted. Newsletter subscriptions are kept until you unsubscribe. Guest accounts are kept until you ask us to close them.

Your choices

• Unsubscribe from the letter using the link at the bottom of any one of them, or by writing to us. We do not put unsubscribe links on booking emails, because you need those.
• See, correct, or delete what we hold about you — email us and we will do it. We may need to keep booking and tax records we are legally required to retain.
• Close your account — email us and we will remove it.

Keeping it safe

Passwords are hashed with a salted, memory-hard algorithm and never stored in a readable form. Sessions are held as hashed tokens in cookies that JavaScript cannot read. Connections are encrypted. Access to the admin is limited to named people with their own logins, and administrative actions are logged.

No system is perfect. If something ever goes wrong with your information, we will tell you and the relevant authorities as New York law requires.

Children

This site is meant for adults booking a stay. We ask how many children are in your party, as a number, so we can prepare the cabin — we do not ask for their names, ages, or anything else about them.

Changes

If we change this policy in a way that matters, we will update the date at the top and, if the change is significant, tell you by email. This version is 2026-09-29.