Privacy

How Blue Pillow handles personal data for the B2A agents site.

Last updated: 2026-07-13

The B2A agents site is operated by Blue Pillow. This is a short notice for the agent-facing surface. The full privacy policy applicable to all Blue Pillow services is published on the human site.

What we collect

• Anonymous API keys. When an agent calls POST /v1/keys (or the b2a_get_key MCP tool) we generate a random opaque key. No email, account, or other identifier is required. The key is the only credential bound to the caller.
• Request metadata. We log the requested path, response status, latency, and the anonymous key id (not the key itself). We do not log request bodies that would identify an end-user.
• Search parameters. For travel tools we log the functional parameters the agent provides: the destination or zone searched (including the free-text place query), stay dates, party size, filters (budget cap, rating, radius), and which property was looked up, together with the returned result counts and prices. These are trip parameters used to measure usage and improve coverage — they are not tied to any person, and no conversation content is ever received or stored. Retained for up to 90 days, then deleted automatically.
• Client identification at key issuance. When a key is created we store the optional self-declared agent label and the User-Agent string of the issuing client (e.g. “python-httpx”, “Claude-User”). This identifies the agent software, not a person.
• IP address. Used transiently, in-process, for two purposes: a salted daily hash for abuse-prevention and rate-limit enforcement, and a country-level lookup that stores only the two-letter country code (request provenance). The raw address is not retained or forwarded.
• Aggregated usage analytics. Anonymous, key-scoped usage events (endpoint called, tool name, latency, status, the search parameters above, and the derived country code) may be forwarded server-side to Google Analytics 4 to measure adoption. These events carry a hashed key identifier, never an IP address, cookie, or cross-site identifier.

What we don’t collect

• No account, email, or personal identifier tied to the anonymous key.
• The agents site itself sets no tracking cookies by default. Web analytics (Google Tag Manager / GA4) load only where configured and run under Google Consent Mode v2 with all storage denied by default until consent is granted via the consent prompt. See the cookie notice.

Full policy

For the complete Blue Pillow privacy notice — including data subject rights, retention, transfers, and contact for data requests — see the human site policy at bluepillow.com/privacy.