Privacy
Updated September 18, 2026.
The essentials
Bora Explorar does not require an account and does not sell personal data. When product events are enabled, search text and a manually entered destination may be stored in the analytics service so we can understand demand and improve search quality.
Location and searches
Location is used only after you authorize it in the browser. Coordinates, city, state, country, and search text are sent to our server and Google Places to find places. Approximate straight-line distances for results and favorites are calculated in the browser, and your current location is not saved on the device. Vercel Analytics may store the text and typed destination; when you use your current location, it records only that geolocation was used, never the coordinates or distances.
The server-side search record receives no account, cookie, or session. If you accept Google Analytics, its behavioral event receives only a sanitized destination, general intent category, and actions on known places, never the free-form search text or coordinates. Avoid entering names, contact details, or other personal information that is not necessary to find a place.
Optional account and sync
You can use Bora Explorar without an account. If you sign in with Google or an email code, Neon Auth processes your identity and session. Google may provide your name, email address, and profile photo; email-code sign-in uses the address you enter. Authentication cookies keep the session active.
Sync includes favorites, saved searches, collections, visited-place marks, and completed challenges. The database stores place IDs, never coordinates, photos, or Google photo references. Current place names, addresses, ratings, and other details are requested again when needed.
Database rows are protected by owner-only access rules. You can export your data or delete the entire account in the product; deletion also removes associated records.
Saved and shared searches
When you choose “Save search,” intent and destination stay in this device's local storage and can be cleared from the home page. If sync is active, they are also sent to your account. Shared links put that text or up to three place IDs in the URL fragment, never exact coordinates. The fragment may remain visible in local browser history and does not create a public database record.
Retention measurement
When you are signed in and use a relevant product action, we may record only your account identifier and the UTC date of activity. This table does not record what you did. Active days are retained for up to 180 days.
Language preference
When you choose PT or EN, we save only the selected language in a functional cookie for up to one year. It contains no searches, location, or advertising identifiers and can be removed through browser controls.
Audience measurement
We use Vercel Web Analytics to count visits and understand searches. When product events are enabled, we record the search text, manual destination, and operation outcome to improve the service's quality and coverage. We rely on legitimate interest for this processing and do not use the data for advertising or visitor profiling.
Search events are sent without IP addresses, cookies, sessions, coordinates, user agents, place names, addresses, or photo references from the returned places. On the Pro plan, Vercel provides a 12-month reporting window. Partner recommendation impressions and clicks record product, general intent, position, marketplace, and surface.
Separately, Web Analytics pageviews may include technical data such as the accessed page, time, referrer, approximate country, browser, and device type.
With your explicit consent, we also use Google Tag Manager and Google Analytics 4 to measure the discovery funnel, sanitized destinations, general categories, opened details, and actions such as saving a favorite, marking a visit, or opening directions. GA4 does not receive free-form search text, email, account identifiers, coordinates, addresses, distances, photos, or photo references. Place names and IDs are sent only after a real action and are limited to 100 characters.
Google Analytics may use cookies such as _ga, IP addresses, and browser technical data to produce metrics. Event retention is 14 months. We do not use Google Signals, User-ID, remarketing, ad personalization, or Google Ads integration. Your choice stays in this browser for up to 180 days and can be refused or changed under “Privacy preferences”; disabling analytics stops new events and removes _ga cookies accessible on this domain.
Advertising
When advertising is enabled, guides may display ads supplied by Google AdSense. Google and its partners may use cookies, identifiers, IP addresses, and browser, device, and visited-page information to deliver, limit, measure, and, when authorized, personalize ads.
Advertising cookies are not required to use search, save favorites, or read guides. Choices presented in the privacy notice can be refused or changed. Ad availability and content do not influence Bora Explorar's editorial criteria.
Google Maps Platform
Results, ratings, addresses, hours, and photos are provided by Google Maps Platform. Use of those services is also subject to Google's policy.
Project support
When available, the site displays a random Pix key that you can copy. Payment is completed in your financial institution's app. Bora Explorar does not receive or store the amount, identity, payment method, or other transaction data.
For international support, the link opens an external Buy Me a Coffee page. Information entered there is processed by Buy Me a Coffee and its payment processors under those providers' own policies.
Abuse protection
To limit automation and improper costs, an IP address may be transformed into a temporary hash that changes daily. The hash is used only for request limits and does not create a visitor profile.