Privacy policy
Last updated 29 July 2026
The Balearic Bay is free and ad-free, has no accounts, and does not ask visitors for a name or email. It does process limited pseudonymous technical data.
First-party audience measurement
The site records a small allowlist of product events such as a page view, opening a spot, changing island or mode, entering Eclipse mode, and opening an official area, managed event or conditional viewpoint. A record can include the event name and time; bounded interaction context such as island, mode, interface language, referring source, viewport width, public spot name and type, or action; browser user-agent; a truncated IP address; a country code supplied by the site's network provider; and a random first-party visitor identifier. That identifier is pseudonymous, not anonymous. It is used for aggregate audience measurement, service improvement, rate limiting and abuse prevention—not advertising—and is not sold or shared for advertising.
Cookie
A first-party uid cookie stores the random visitor identifier for up to 30 days. The site does not set third-party advertising cookies.
Feedback and network data
Feedback stores the submitted message, app context, browser user-agent, truncated IP address and visitor identifier so the operator can respond to product issues and prevent abuse; it does not store the network country code. Do not submit personal or sensitive information. Live data is normally fetched through the site's server; Wikimedia Commons receives ordinary network information such as an IP address when a remote beach photograph is requested.
Retention and rights
Audience-measurement events are scheduled for deletion after 90 days and feedback after one year. Limited processing is based on the operator's legitimate interests in running, securing and improving the service. Depending on applicable law, users may request access, correction, erasure, restriction or objection. Use the in-app feedback control for privacy questions or requests and provide enough context to locate the record.
This policy describes the site's current implementation; it does not claim that pseudonymous records are anonymous.