One moment…
Legal
Last updated 2026-07-18
We collect as little personal data as possible. This page describes what we collect, what we use it for, how long we keep it, and your rights.
We collect an email address when you use an enabled email feature, such as the newsletter. If you create an account, Clerk processes the account details you provide, which may include your name, email address, profile image, and authentication metadata. Safar does not collect payment details or government IDs. For a guest confirmation, we do not store the submitted email address. We store a one-way email hash for abuse prevention, the stay month if provided, the confirmation choices, and an optional sanitized note pending moderation. When you click an approved affiliate link, we may record a limited server-side click event: the property or partner category, partner, language, and a one-way hash of your user agent. We do not retain raw IP addresses or raw user-agent strings in these records. We also record limited first-party usage events, such as stays viewed, searches, filters, and saves, with a random per-visit session id, language, and the same one-way user-agent hash. Signed-in events may carry an opaque account id, not your email address. Our first-party event endpoint honors Do Not Track and Global Privacy Control and records no event when either signal is present.
We use a session cookie to keep your locale and theme choice across pages, and a one-per-property cookie to avoid re-showing the newsletter modal during a session. We do not use third-party tracking cookies. Vercel Analytics is cookieless and helps us measure traffic for partner applications. Signing in sets Clerk authentication cookies (strictly necessary). Your language, currency and theme choices live in cookies or your device local storage, as do saved stays, trips and recently-viewed lists. On a first visit we may read your country from the request to pick a default language - it is not stored. We also set a random, anonymous analytics session cookie to group these usage events within a single visit; it clears when you close your browser, is never shared with third parties, and is not set when Do Not Track or Global Privacy Control are on.
We link out to approved third-party travel partners for stays, flights, and trip extras when those partners are shown as available in the product. Each partner has its own privacy policy. When you click an affiliate link, you leave Safar. We pass referral and stay-search parameters so the partner can provide the requested results and credit the referral; we do not intentionally pass your email address or account profile. Sign-in is handled by Clerk; the site runs on Vercel with a Neon database. We use Vercel Analytics for traffic measurement. Ask Safar and AI itineraries send your request text - with emails, links and long numbers stripped first - to Anthropic to interpret it. Anthropic states that commercial API inputs are not used for model training unless the customer opts in. Exchange rates are fetched with no personal data attached.
Newsletter emails are kept until you unsubscribe or ask us to delete them. Account data is kept while your account remains open and is also subject to Clerk's retention practices. Guest-confirmation records are kept while they remain relevant to verification, unless you ask us to delete data linked to your email hash or we must retain a record for security or legal reasons. Raw affiliate click rows are deleted after 13 months. First-party usage events are kept at most 12 months, then deleted.
Safar is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or a higher age where local law requires). If you believe a child has provided us personal information, email hello@staysafar.com and we will delete it.
You can ask us to access, correct, or delete personal data associated with you by emailing hello@staysafar.com. We will respond within the deadline required by applicable law. Depending on where you live, you may also have rights to restrict or object to processing, data portability, and to appeal a decision about your request. We do not sell personal information for money. Contact us at the same address if you have a question about referral attribution or other data sharing.