Privacy

01About this policy

This policy explains what happens to information when you use onhollies (the “Service”) at onhollies.com.au. The Service is operated by Jesse Paul Lawson (ABN 74 487 718 335), trading as onhollies (“we”, “us”, or “the operator”). It describes what the Service actually does, in plain English. If anything here is unclear, email us; the address is at the end of this page.

02The short version

onhollies helps families plan the school holidays: holiday dates for every state and territory, and Plan’s guides to places to go and things to do. There are no accounts, no logins and no forms. We don’t ask for your name, email or any personal details to use it, and we don’t know who you are. Our analytics records how the Service is used under a random identifier, not your name. A few standard third parties (our host, our analytics provider, a weather service and a map service) necessarily receive basic technical data such as your IP address. We don’t sell your data or use it for advertising.

03Information you give us

The Service has no sign-up, login, account or form. The only time you give us personal information is if you choose to email us. We then receive your email address and whatever you put in your message, and use them to reply and, if you’ve told us something is out of date, to correct it. The Service is meant for parents and carers, and it doesn’t ask anyone, including children, for personal information.

04Information stored on your own device

To remember your choices, the Service saves a little information in your browser:

• your selected state or states, holiday filter, calendar view, and whether regional holidays are shown, kept in your browser’s local storage until you clear it;
• the last calendar you looked at, so the Calendar link takes you back to it, kept until you close the tab;
• one small functional cookie (“oh_state”) that remembers your state so we can take you straight to that state’s page. It holds only a state code (like “NSW”) and lasts up to a year. It’s set when you pick one state, when you open a state’s page, or from the state we estimate from your IP address (section 5); and
• a random identifier for our analytics (section 5).

Your browser sends the “oh_state” cookie with each visit, and our host reads it to send you to the right page. Your choices of state, filter and view are also recorded in our analytics, as part of how the Service is used. Plan doesn’t save anything on your device: the break and place you pick are kept in the page’s address, so a link you copy carries them, and nothing else. You can clear all of this at any time through your browser settings.

05Information collected automatically

As with any website, some technical information is received automatically when you visit:

• Hosting (Cloudflare). The Service is hosted on Cloudflare Pages. As the host and content-delivery network, Cloudflare receives standard request data, including your IP address and browser type, to deliver the site and keep it secure. Cloudflare also tells the site your country and, in Australia, your state or territory, estimated from your IP address. We use it to show your state’s holidays first, and the site saves it in your browser as described in section 4. We don’t keep our own logs of your visits.
• Analytics (PostHog). We use PostHog to understand how the Service is used so we can improve it. PostHog records the pages you view and the links and buttons you click (including a link’s words and where it goes), the choices you make on a page (such as your state, the holiday filter or a break you pick in Plan), each page’s address, the site you came from, and basic device and browser details (such as the browser, screen size, language and time zone). It links these to a random identifier kept in your browser’s local storage (or, where local storage isn’t available, in a PostHog cookie), not to your name. PostHog receives your IP address, uses it to estimate your approximate location (such as your country and city), and is set to discard the address itself, so it isn’t stored. It also collects error reports if something on the site breaks. There is no session recording. PostHog processes this data on servers in the European Union.

06Maps and weather

Maps. Where a page shows a map (a place’s page, and Plan’s map view), your browser loads the map’s tiles and place names from OpenFreeMap, which receives your IP address and the area of the map in view.

Weather. On the holiday calendar, today’s weather comes from Open-Meteo, a third-party weather service. Your browser asks it for the weather in your selected state’s capital city, so Open-Meteo receives your IP address and that city’s coordinates, not your location.

If a map or the weather doesn’t load, the rest of the Service works normally.

07Who receives your information

We keep third parties to a minimum. They are:

• Cloudflare: hosting and delivery (receives request data such as your IP address);
• PostHog: usage analytics (processed in the European Union; your IP address is discarded once it has estimated your location);
• Open-Meteo: the weather on the calendar (receives your IP address when the weather loads);
• OpenFreeMap: the maps (receives your IP address and the area of the map in view when a map loads); and
• Zoho: our email (holds anything you send us).

We may use AI tools (Anthropic’s Claude) to help us read email and keep our records up to date. When you follow a link to another site, such as an operator’s or a government page, Google Maps for directions, or Google Calendar or Outlook to add a holiday, you go to that site and its own privacy policy applies; it receives only what the link holds, such as a place’s location or a holiday’s name and dates.

Each receives only what it needs to do its job. We don’t share your information with anyone else, and we don’t sell it or use it for advertising.

08Cookies

The Service sets one cookie of its own, the functional “oh_state” cookie described in section 4. Our analytics keeps its identifier in local storage rather than a cookie, except where local storage isn’t available. Our host may set a security cookie of its own if it needs to check that a visitor isn’t a bot. We don’t use advertising or cross-site tracking cookies, which is why you won’t see a cookie consent banner.

09Businesses and people we write to or quote

To keep our guides right, we sometimes write to the businesses and organisations we list, at the addresses they publish, and we keep their replies, including the names of the people who answer. Where we quote an organisation or a knowledge-holder, we credit them by the name they publish. We use this only to keep our guides accurate and credited, and we never add anyone to a mailing list. If you’d rather we didn’t write to you again, or want your name corrected or removed, email us.

10Keeping information

We keep email, and our records of the replies we receive, for as long as we need them to answer and to keep our guides accurate, in private, access-controlled accounts. Some of the providers above handle information outside Australia (PostHog, for example, in the European Union).

11Your choices

• You can clear the stored choices and the cookie at any time in your browser settings.
• You can block or limit analytics with your browser’s privacy settings or a tracker blocker; the Service still works. Our analytics doesn’t respond to a browser’s “Do Not Track” setting.
• You can email us with any question about your information, or to ask us to correct or delete what we hold about you.

12Changes to this policy

We update this policy whenever the Service changes how it handles information. The current version will always be on this page, with the “last updated” date shown above.