Privacy.

Google sign-in

Blenesa uses Google and Supabase Auth to identify your account. Google shares your basic profile and email address with Supabase Auth. Your Google password stays with Google. Blenesa does not request access to your Gmail, Drive or contacts.

Your saved places

Your visited places, ratings and chosen home destination are stored in Supabase and connected to your account. They are private and are not shown to other visitors. You can remove places and clear ratings from My travels.

Your account profile stores your chosen home city. We also store when profile and travel records are created or updated. If you choose to import an older browser travel log, we keep a receipt to prevent duplicate imports and leave the original browser copy in place.

Shared holiday calendars

Holiday calendars store their name, date range, members, chosen display names and daily availability in Supabase. People who join the same calendar can see its members’ display names and availability. Your email address is not displayed to other members, and your private travel journal stays private.

An invitation link lets another signed-in person join that calendar. Share it only with people you want to plan with. Calendar and invitation addresses, display names and exact availability dates are excluded from website analytics.

Location suggestions

If you suggest a missing location, we save its name and the time it was submitted in Supabase for our admins to review. Suggestions are not linked to your account or shown to other visitors.

Live forecasts

Tomorrow’s weather and the two-week forecasts come from Open-Meteo. Our server asks for them using each destination’s published coordinates, so your browser does not contact Open-Meteo. Your searches, trip dates, IP address and account details are not sent.

Cookies and hosting

Sign-in cookies keep you signed in. Browser storage remembers browsing preferences. Vercel hosts the site and processes technical request information. An approximate location can suggest a home city; Blenesa saves your chosen city rather than those location coordinates.

Anonymous website analytics

When enabled, we use PostHog EU Cloud to understand visits to our public pages and use of search, trip-date controls and destination comparisons. Analytics includes page paths, referring pages, campaign labels, device category and public actions. Query strings and fragments are removed from page addresses before they are sent.

PostHog analytics does not store cookies or use your browser’s local or session storage. It uses a server-generated identifier that changes daily, rather than an account profile. To calculate it, PostHog briefly uses your IP address, browser user-agent and site hostname. It discards the IP address and raw user-agent after hashing and does not enrich analytics with location data. We honour your browser’s Do Not Track setting and do not use session recordings. Analytics events are retained for up to 12 months.

We do not send search or suggestion text, exact travel dates, email addresses, account identifiers, saved places, ratings or home locations. My travels, holiday calendars, administration and authentication pages are excluded. We record only a general sign-in-started action when you choose Google sign-in, without your identity or return URL.