Stayhatch Booking lets an accommodation owner accept direct booking requests from a WordPress site. It supports multiple units, optional combined bookings, availability calendars, seasonal pricing, minimum and maximum stays, cleaning fees, owner blocks, email workflows with owner notifications, manual payment instructions, and iCalendar import/export for channels such as Booking.com and Airbnb.
Booking requests are protected against abuse with a maximum stay per request, rate limiting, optional Cloudflare Turnstile, and by keeping unreviewed requests out of channel exports.
The plugin is translation-ready; translations are delivered through translate.wordpress.org.
Card payments with Stripe Checkout (deposits, balance payments, refunds, and disputes) are available in the separate Stayhatch Booking Pro add-on. This plugin is fully functional without it.
Add the Stayhatch Booking block in the editor or use [stayhatch_booking].
For developers
Add-ons load on the stayhatch_booking_loaded action. Other extension points: stayhatch_reconcile (runs every 15 minutes), stayhatch_compose_mail, stayhatch_mail_kinds, stayhatch_mail_job_stale, stayhatch_owner_event_titles, stayhatch_booking_panels, stayhatch_booking_list_note, stayhatch_guard_edit, stayhatch_privacy_retain, stayhatch_mail_queue_ids and stayhatch_client_ip (the visitor address used for rate limiting behind a proxy).
External services
iCalendar imports are optional. When an administrator adds a feed, WordPress requests that exact HTTPS URL and stores unavailable dates, event identifiers, feed name, unit mapping, fetch time, and errors. Data use is governed by the selected calendar provider’s terms and privacy policy.
Cloudflare Turnstile is optional and off by default. When an administrator defines STAYHATCH_TURNSTILE_SITE_KEY and STAYHATCH_TURNSTILE_SECRET, the booking form loads Cloudflare’s challenge script and the server sends the challenge token and the visitor’s IP address to Cloudflare to verify the request. Terms and privacy information: https://www.cloudflare.com/website-terms/ and https://www.cloudflare.com/privacypolicy/
The plugin itself does not contact Stayhatch or require a Stayhatch account.
Privacy
The plugin stores guest identity and booking, price, payment-reference, note, and email-delivery data. It registers WordPress personal-data export and erasure callbacks and suggests privacy-policy text. Active or financial records are retained by the eraser because they may be required to fulfil a contract or legal obligation.
Screenshots
Booking form with the availability calendar for each accommodation.
The booking form on a phone.
Booking calendar in the admin.
Accommodation settings with prices and stay rules.
Calendar sync: export and import iCalendar feeds for external booking channels.
Email settings for guest and admin messages.