Privacy policy

Who we are

SkyPlan at cappadocia.ai is run by Cappadocia Experience LLC, a Wyoming limited liability company (filing ID 2026-002075110), which also trades as Cappadocia Balloon Flights. It is the data controller for the data described here.

• Registered office: 30 N Gould St, Ste R, Sheridan, WY 82801, United States
• Operational address: Aydınlı-Orta Mah., Kağnı Yolu Sok. No: 1, 50180 Göreme, Nevşehir, Türkiye
• Privacy requests: fly@cappadociaballoonflights.com · +90 384 271 23 88

What we keep and why

• Your trip note. If you describe your trip in words, our AI provider, Anthropic, reads the note when you ask us to plan, to fill in your plan. We don’t store or log it, and it never reaches our analytics; how long Anthropic keeps it is under “Service providers and transfers abroad”. Before it is sent, we remove e-mail and web addresses and most phone numbers and booking references. Only the choices you confirm under “What we understood” become your plan. Times, prices and places in your plan come only from our records, never from the AI. Please don’t include names, phone numbers, booking references or health details (contract, KVKK Art. 5/2-c, GDPR Art. 6(1)(b)).
• Your plan. The dates, group size and preferences you enter, the plan we make from them, the bookings you mark as done and any booking reference you choose to keep there. We need this to show you the plan (contract, KVKK Art. 5/2-c, GDPR Art. 6(1)(b)). Plans are saved by link only: anyone with the link can open the plan, including any booking reference saved in it, so share it with people you trust. You can delete a plan with “Delete this plan” under Book.
• Partner links you open. Which link you followed and when, and a random click id that goes to the partner so a booking can be credited to us (legitimate interest, KVKK Art. 5/2-f, GDPR Art. 6(1)(f)).
• Visit counts, for every visitor. When you arrive from another site or a link, we record the page you landed on (a plan link without its plan id), the referring site’s domain, any campaign tags in the link (utm_source, utm_medium, utm_campaign) and the country our hosting provider derives from your IP address. With each plan you make we keep the same country, whether you started from your own dates, from our date suggestions or from a trip note (never the words you wrote), and how long it took from arriving to asking for the plan. No cookie, id or browser details are used and the IP address is not stored, so these counts are not linked to you. They show us which sources and countries bring travellers and whether the planner helps them (legitimate interest, KVKK Art. 5/2-f, GDPR Art. 6(1)(f)).
• Analytics, only if you accept. Planning steps you take (for example dates chosen, plan shown, plan shared), the page you landed on, the referring site’s domain and campaign tags, linked by the random visitor and visit ids below. We do not store your IP address or browser details with these events (consent, GDPR Art. 6(1)(a)). Without consent, events are kept without any id.
• Technical data. Our hosting provider processes your IP address to deliver the site and to limit abuse. We do not store it with your plan or analytics.

We do not sell your data, and we do not use advertising networks, remarketing or ad pixels.

Cookies

Analytics cookies stay off until you choose “Yes, that’s fine”, or turn our own analytics and Google Analytics on one by one under “Choose what’s on”. “Privacy choices” at the end of every page lets you change your mind; turning one off removes its cookies.

• sp_consent

  Purpose

  Remembers your choice for our own analytics

  Kept for

  180 days

  Set when

  After you choose

• sp_consent_ga

  Purpose

  Remembers your choice for Google Analytics

  Kept for

  180 days

  Set when

  After you choose

• sp_vid

  Purpose

  Random visitor id for our own analytics

  Kept for

  180 days

  Set when

  Only if you accept our own analytics

• sp_sid

  Purpose

  Random visit id for our own analytics

  Kept for

  Until you close the browser

  Set when

  Only if you accept our own analytics

• _ga, _ga_<id>

  Purpose

  Google Analytics 4

  Kept for

  Up to 2 years (set by Google)

  Set when

  Only if you accept Google Analytics

Kept on your device

These are not cookies. They stay in this browser’s storage, and clearing this site’s data in your browser removes them. In the names, <plan> stands for a plan’s id.

Kept until you clear this site’s data, or until you delete that plan in this browser:

• skyplan.recent: the plan you opened last in this browser (its id, its first and last day and its language), so the home page can offer you a link back to it until the trip ends. Opening another plan replaces it, and deleting that plan removes it.
• skyplan.option.<plan>: the balloon option you picked for a plan (Standard, Deluxe or Private), so the plan and your book list remember it. Deleting that plan removes it.
• skyplan.addons.<plan>: the paid add-ons you ticked for a plan, so the plan remembers them. Nothing is ticked for you. Deleting that plan removes them.

Kept only until you close the tab:

• skyplan.fresh-plan: the plan you just asked for, how long making it took and how many tries that needed, read once by the plan page to count the “plan shown” step, then removed.
• skyplan.flash: a one-time message for the plan page after you change your plan (what changed, the plan “Undo this change” goes back to, and the view and day you were on), removed once it is shown.
• skyplan:home-refreshed-for: the date of an out-of-date calendar the home page has already asked us to refresh, so it asks only once.
• skyplan.theme: whether you switched this site to dark mode, so the pages you open next in this tab stay that way. Every new visit opens in light mode.

Google Analytics

With your consent we use Google Analytics 4 to see how the planner is used, including the planning steps you take (for example plan shown, partner link opened), sent without your dates or our ids. Page addresses reach Google with the plan id removed (for example /p/:id), so Google cannot open your plan. Advertising storage, ad personalisation and Google signals are turned off. Google processes this data as our processor and may do so in the United States. It is kept for the period set in our Google Analytics account. If you withdraw consent, the tag stops on the page and its cookies are removed.

Partners and bookings

Bookings are made with the provider, not with SkyPlan: Booking.com (through CJ Affiliate), GetYourGuide and Cappadocia Balloon Flights. When you follow a partner link you leave SkyPlan and that partner's own privacy policy applies. We never see your payment details.

Service providers and transfers abroad

• Vercel: hosting (EU region, Frankfurt)
• Supabase: database (EU region, Frankfurt)
• Anthropic: reads your trip note to fill in your plan (United States). Under Anthropic’s commercial terms, notes are not used to train its models and are deleted within 30 days by default; they are kept longer only if flagged under its usage policy, or where the law requires.
• Google: Google Analytics 4, only with your consent
• Google: Google Maps, to show the map on your plan (your browser loads the map from Google)

Some of these providers are based in the United States, and Cappadocia Experience LLC is itself established there, so your data is processed abroad. We rely on safeguards such as the standard contract published by the Turkish Personal Data Protection Board (KVKK Art. 9) and the EU Standard Contractual Clauses. Ask us at fly@cappadociaballoonflights.com for a copy.

How long we keep it

• Analytics events: 13 months.
• Visitor and visit ids: 13 months after your last visit.
• Partner clicks and plans that led to no booking: 25 months.
• Booking and commission records: as long as tax and commercial law requires (up to 10 years).
• Plans you delete: taken off their link at once, and the booking references saved with them are deleted then. The rest of their record is kept as above, so that a booking made through them can still be credited to us.

Your plan link

Plans are saved by link only, so there’s no account to look them up. Anyone with the link can open the plan, including any booking reference saved in it. To delete a plan, use “Delete this plan” under Book, or write to fly@cappadociaballoonflights.com and include its link. Your bookings with providers are not affected.

Your rights

Under KVKK Art. 11 and the GDPR you can ask whether we process your data and get a copy, have it corrected or deleted, restrict or object to processing, take it with you, and withdraw consent at any time without affecting earlier processing.

Write to fly@cappadociaballoonflights.com or by post to Aydınlı-Orta Mah., Kağnı Yolu Sok. No: 1, 50180 Göreme, Nevşehir, Türkiye. We may ask you to confirm your identity and we answer within 30 days, free of charge. If you are not satisfied, you can complain to the Turkish Personal Data Protection Board (KVKK Kurulu) within 30 days of our answer, and within 60 days of your request at the latest, or to the data protection authority where you live in the EU/EEA.

Changes

We update this page when the way SkyPlan handles data changes. The date at the top shows the last change.