Legal
Privacy
What we collect, what we deliberately do not, and how long we keep it.
Last updated August 2026
What we collect
Browsing and searching GlobalSleeps does not require an account and does not require you to give us anything about yourself.
To understand demand — which destinations people are looking for, which we do not yet cover — we record anonymous search events. Each one holds the destination, the dates, the number of travellers, the product type, a coarse device class (mobile, tablet or desktop), a two-letter country from our CDN, and a random identifier stored in a first-party cookie.
What we deliberately do not collect
These are choices in the implementation, not omissions:
- IP addresses — never written to our database
- Raw user-agent strings — read to classify the device, then discarded
- Third-party analytics or advertising tags — we run none
- Cross-site tracking pixels — we set none
Accounts
If you create an account we store your email address, an optional display name, and your password as a salted scrypt hash. We never store the password itself and cannot recover it.
Your saved items and trips are held against that account. We do not share any of it with our travel partners.
Affiliate clicks
When you click through to a partner we record which product, which partner, which page and placement the click came from, the price shown at the time, and a click identifier that the partner echoes back to us in their commission reports.
That identifier is how we know a booking happened. It is not linked to you unless you are signed in.
Your rights
You can request a copy of, or the deletion of, any data associated with your account by contacting us. Anonymous search and click events are not linked to an identifiable person and therefore cannot be retrieved individually.