Privacy policy

This page explains what personal data Stay in Bosnia collects, why, and for how long. It describes how the site works today; the legal parts are still to be checked by a lawyer.

Who is responsible

[Business name, legal form and registration number]
[Street and number, postcode, town], Bosnia and Herzegovina
Email: [contact address]

What we collect, and why

When you just look around

• Counting visits and contact clicks. We count how often a listing is viewed and how often its contact details are opened, so hosts can see how their listing does. We do this without cookies and without storing your IP address: your device is identified only by a code made from your IP address, your browser name and a random value that changes every day and is then deleted. The same code can't be linked to you, or to your visit on another day. Single events are deleted after 13 months; we keep only the daily totals per listing.
• Server logs. Our server records technical details of each request (IP address, time, page, browser) to keep the site secure. [How long logs are kept, and who hosts the server.]
• Maps. Pages with a map load the map pictures from the OpenStreetMap Foundation (tile.openstreetmap.org). Your browser sends your IP address to them when it loads the map. [Link to the OpenStreetMap privacy policy, and whether this needs your consent.]

When you create an account

• Your name, email address, password (stored only in scrambled form) and preferred language, to run your account.
• If you turn on two-step login: the secret for your authenticator app.
• If you sign in with Google: your Google account ID, name and email address, as Google sends them to us.

When you list a place or an experience

• Your application: type of provider, public name, registered business name, contact person, phone, business email, website, address (never shown publicly) and a short note.
• Your listings, including photos. Before a photo is stored, we remove all its hidden data (location, camera, owner).
• Contact details on a listing (phone, email, WhatsApp, website, social media) are shown to visitors when they choose to open them.

When you write to us

• The contact form and the report form send us what you write, plus your name and email address if you give them. [How long we keep these messages.]

Who receives data

• Our hosting provider: [name, country].
• Our email provider, for emails we send (account emails, answers): [name, country].
• Google, only if you sign in with Google.
• The OpenStreetMap Foundation, when a page shows a map (see above).
• [Backup storage: name, country.]

We do not sell personal data and we do not show third-party advertising.

Cookies

We only use cookies the site needs to work. See the cookie page.

How long we keep data

• Accounts: until you delete your account. [What happens to listings and reviews.]
• Visit and click events: 13 months; daily totals per listing: as long as the listing exists.
• [Server logs, messages, reports: periods.]

Your rights

[Your rights under the applicable data protection law: access, correction, deletion, restriction, objection, data portability, withdrawing consent, and the right to complain to a supervisory authority, with its name and address.]

To use your rights, write to [contact address].

Changes

We will update this page when the site changes. The date at the top shows the latest version.