Baeri
Baeri privacy policy
Your information, third-party search tools and the choices you control.
Who is responsible
Updated: 1 November 2026. This privacy policy covers baeri.eu. Its operator and data controller is Erik Bačik, an individual operating Baeri as a personal project in Slovakia. Contact hello@baeri.eu. Postal and telephone contact details are on the operator information page.
The separate Splix Android app and website have their own app privacy policy and website notice. Baeri requires no account and receives no private Splix Trip, account or Sync identifiers.
Your choices before third-party tools load
Flight search (Travelpayouts), the accommodation map (Stay22), and recommendations (Travelpayouts Drive) have separate choices. They are off until their relevant permission is given, except that an unexpired earlier Drive-only permission continues to cover Drive alone. Accepting one service does not authorize another. A flight-search permission loads its form automatically; Stay22 also requires you to submit “Search stays”.
Use Privacy choices in the footer to allow selected services, reject all optional services, or withdraw permission. Rejecting does not block Baeri’s planner, local location suggestions, calendar or information pages. The embedded third-party search tools will remain unavailable. Your choices are independent of accepting the website terms.
A Global Privacy Control signal starts all three services off, overrides ordinary previous grants, and is saved as an opt-out. Baeri does not open a banner automatically in response to that signal. You can open Privacy choices, select Flights and/or Stays and separately confirm a specific search exception after reviewing the provider tracking and data-sharing notice. No search provider loads before that confirmation. Drive recommendations remain off. The exception applies only to the selected search tools, is remembered in this browser for up to 180 days, and can be withdrawn with Reject optional services. The footer displays the current browser-signal and search-exception status. Baeri has not verified a tracking-free version of these embeds; this choice is not a promise that providers perform no measurement or data sharing. Stopping a service that has already loaded reloads the page to remove its running code while preserving your Baeri plan. This cannot undo processing that already occurred. Baeri removes known accessible first-party flight-widget cookies/storage; third-party or HttpOnly cookies require browser or provider controls.
What Baeri processes and why
Your browser-local plan: selected categories, destinations, dates, counts and minimal shortlist references are processed in your browser to carry out your requested planning flow. The plan uses session storage, with a 12-hour inactivity expiry checked when the planner loads. “Clear my plan” removes it. Baeri does not maintain an account database or copy provider prices or map properties into this plan.
Local Lists: when you save research, Baeri stores named Lists, your public URLs, category choices, notes, labels, saved search criteria and optional user-observed prices in IndexedDB in this browser. Lists remain until you delete them; they do not inherit the temporary plan’s 12-hour expiry. No research is uploaded to a sharing service or imported into Splix. Saving/reviewing does not fetch provider metadata. “Paste and save copied link” reads clipboard text only when you press it, validates one public HTTPS link and saves it locally. Baeri does not monitor your clipboard; if access is denied, you can paste into the URL field yourself. A small local-storage marker supports the saved count, and a requested search reference can pass through session storage until opened in Lists. If a privacy change reloads a search page, Baeri attempts to preserve the unsaved research-panel draft in session storage and consumes it on reopening; recovery expires after 12 hours. Private or incomplete URLs are omitted. Recovery can fail if temporary storage is blocked or full; committed Lists remain separate.
Backups are downloaded JSON files that can contain your notes and travel details. Restoring creates separate copies. Browser clearing, private browsing and device loss can remove local data; keep backups privately. “Clear my plan” does not delete Lists. Drive and other partner tools do not run on the Lists page. Opening a saved provider URL is explicit and then subject to that provider’s notices.
Hosting and security: Cloudflare hosts the site and processes request information such as IP address, browser/device information, requested URL and time. The purpose is to deliver, protect and diagnose the website; the GDPR basis is the legitimate interest in operating a secure website. Necessary browser storage supports the plan and your privacy choices.
Email: if you contact Baeri, your address and message are processed to respond and handle the request, based on the legitimate interest in correspondence and, where applicable, a legal obligation. Please limit what you send to information relevant to your enquiry.
Flight search · Travelpayouts White Label Web
After you allow flight search, your browser contacts Travelpayouts infrastructure at tpemd.com and apistp.com services. Google Fonts supplies the widget font. Technical information includes your IP address, browser information and page URL; the provider may infer an approximate location. Routes, dates, traveller counts, cabin and other choices you enter are sent directly to the search provider.
The provider supplies the results, prices, ranking and booking links and may use storage/identifiers for search state, affiliate attribution and measurement. Baeri blocks its known avsplow.com collector, but this alone does not remove the provider’s measurement code or storage. Flight-result content is not imported into Baeri’s shortlist. Baeri’s saved route/dates are not transferred automatically.
Read the Travelpayouts privacy policy, Travelpayouts cookie policy and Google privacy policy. Booking takes place with the selected agency or airline under its own notices.
Accommodation map · Stay22
City and country suggestions come from a list served by Baeri and matched locally. Calendar drafts remain on the page until applied. These controls make no Stay22 request. After you allow Stay22 and submit “Search stays”, the browser loads its map in a separate frame.
Baeri sends only the destination city/country, full check-in/check-out dates, adult count and room count from that form, English/EUR settings and a public affiliate/campaign identifier. Stay22 and the services within its frame receive technical browser data, including IP address, and may process location, interactions, affiliate identifiers and booking/conversion information. Their technologies can support search, measurement and affiliate attribution. The frame is sent without a referring page URL.
See Stay22’s privacy policy and cookie policy for its purposes, recipients, retention and cross-border processing. Your permission for Stay22 does not authorize Drive. Restoring Baeri criteria does not automatically reload the map. No Stay22 Mobile SDK or automatic notifications are installed.
Activities · Tiqets via Travelpayouts
City suggestions are served by Baeri and matched locally using Travelpayouts’ published Tiqets city IDs. No provider request is made while typing. After separate Activities permission and an explicit city request, Baeri loads the account-generated Travelpayouts widget in a sandboxed frame. Tiqets supplies the recommendations and their ordering.
The selected city ID, English/EUR settings, public affiliate identifiers and technical browser data are sent to the providers. Their content can use cookies, storage, affiliate tracking and measurement under their notices. Baeri sends no List contents, notes, plan dates or participant counts to this widget. Dates, availability and ticket options must be checked on Tiqets. Provider scripts run separately from the Lists panel; this does not eliminate provider tracking.
See the Tiqets privacy policy and the Travelpayouts policies linked above for their processing, sharing, retention and international transfers. Restoring a destination never reloads recommendations automatically. Lists accept manually pasted public activity URLs; there is no selected-result import or inventory API.
Optional recommendations · Travelpayouts Drive
Drive runs only after its own permission on eligible pages. It never runs on Lists, category search pages, privacy/cookie/terms/legal pages or Contact. It may read page content and visitor interactions, insert or replace affiliate links, show recommendations/previews, open partner pages and perform usage analytics. Displayed travel information may be included in page analysis; do not place sensitive details in your plan or links.
Its infrastructure includes emrldco.com, tp.media and an error-reporting service. Request data can include IP address, browser/device details, page URL, page content and interactions, with provider-managed identifiers/cookies. The Travelpayouts notices linked above apply. Consent is the basis for Baeri’s activation of these optional tools; a provider may describe other grounds for its separate processing.
Sharing, external bookings and international processing
Cloudflare and Baeri’s email-service provider process information needed for hosting/security and correspondence. The optional providers above receive information when you allow and use their services. Opening a booking agency or airline transfers you to that provider, where its own processing and booking terms apply. Baeri may receive an affiliate commission and reports about qualifying activity. Baeri does not accept passenger/payment details or make reservations.
Providers operate internationally and may process information outside Slovakia or the EEA. Cloudflare describes its safeguards in its GDPR information; the embedded providers describe international processing in their linked notices. Baeri must assess the applicable provider roles, contracts and transfer safeguards; a provider’s published policy alone is not proof that every transfer is authorized.
Retention and local storage
Baeri’s local plan expires after 12 hours of inactivity on its next load. Browser tab closure normally clears session storage, but browser session restoration can retain it. Your service choices, notice version, source and time are stored locally for up to 180 days; expired or invalid records require a new choice. An older Drive choice does not grant flight or map permission. See the cookie and storage inventory.
Correspondence is retained while needed to resolve the request and keep relevant legal records, then removed when no longer needed. Hosting/security and third-party search/attribution data have retention periods determined by the provider, service settings and applicable legal duties. Baeri cannot erase cookies on another origin or data already held by another controller; contact that provider or ask Baeri for help routing your request.
Your data-protection rights
Where GDPR applies, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You can withdraw consent at any time; withdrawal does not affect processing lawfully undertaken before withdrawal. Contact hello@baeri.eu. We will request only information reasonably needed to handle or verify the request.
You can complain to the Slovak Office for Personal Data Protection or another competent supervisory authority. Browser-local plan data can be removed using “Clear my plan”; Baeri may be unable to identify it remotely because it is not stored in an account. Baeri does not make decisions with legal or similarly significant effects through automated profiling. Search ranking is supplied by the provider.
California and other US privacy choices
If applicable US state law gives you rights to know/access, correct, delete, or opt out of sale/sharing or targeted advertising, contact hello@baeri.eu. Baeri applies its service choices and Global Privacy Control handling to visitors in every location. Rejecting all optional services prevents their future loading; provider attribution/measurement can involve advertising-related disclosures.
Baeri does not claim an exemption merely because it is a personal project, or claim that every affiliate disclosure is legally a sale or sharing. Whether specific CCPA duties apply depends on the law’s scope and thresholds. The privacy controls operate independently of that assessment. There is no separate Baeri response to the older Do Not Track browser signal.
Changes and contact
This policy will be updated when the services or processing change. New optional providers or purposes require an appropriate new choice before loading. For questions, contact hello@baeri.eu; operator contact details are on Legal information.