Privacy Policy

Overview

Baggage Limits ("we", "us") is an information site about airline baggage rules. We do not sell tickets, hold luggage, or collect payments. We run no analytics product and set no tracking cookie of our own. The web server keeps a standard access log, which is what any web server does to stay running.

What we collect

Automatically: the web server writes one access log line per request: the address asked for, the time, the browser's user agent and the IP it came from. Cloudflare, which serves the site, keeps its own aggregate traffic counts without setting a cookie. Neither is tied to your identity and neither is used to profile you.

From you (optional): if you write to us through the contact form or by email, we keep the message and your email address for as long as we need to respond and to reference past correspondence.

Local storage: your chosen theme (light, dark, system) and your cookie consent choice are stored in your browser only, not on our servers.

Cookies and local storage

No cookie is set by default. Two things live in your browser's local storage and nowhere else: your theme preference and your answer to the cookie question. Affiliate tracking is opt-in through the cookie banner and loads only after you accept.

Third-party services

We link out to airline websites and use two affiliate networks:

• Travelpayouts, a flight and travel affiliate network. When you click a partner link, Travelpayouts sets its own tracking cookie so we get credit if you book. Their policy: travelpayouts.com/legal/privacy_policy.
• Amazon Associates, for physical goods (luggage scales, packing cubes) we link to Amazon; if you buy, we earn a small referral fee at no extra cost to you.

These trackers load only after you accept the cookie banner. Decline and they never fire.

The contact form is protected by Cloudflare Turnstile, which checks that a person rather than a script is sending the message. It loads with the form rather than after the cookie banner, because the form cannot accept anything without it. Turnstile sees that check and not your name, your address or your message.

How we use the data

Server logs are there to keep the site up and to find faults, and Cloudflare's counts tell us roughly how busy the site is. We do not build advertising profiles, do not sell data to anyone, and do not target you across other websites.

Data retention

Server access logs are kept for a short period by the host and then rotated away. Contact form messages are kept for as long as we need to respond and for a reasonable period after (typically up to 3 years). You can ask us to delete correspondence at any time.

Your rights

Under GDPR (EU/UK) and similar frameworks (CCPA in California), you can request access to, correction of, or deletion of the personal data we hold about you, and object to how we use it. Email us at [email protected] and we will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority.

Children's privacy

The site is intended for a general audience and not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We update this policy from time to time. The "last updated" stamp at the top of the page tells you when. Substantive changes are announced in the site footer for at least 30 days.

Contact us

Questions or requests about this policy? Email [email protected] or use the contact form.