This page aggregates measured, corroborated evidence: donors' iPhones recorded apps contacting this domain, every claim below was reported by separate accepted donations and published under a human verdict (later rows for an approved app inherit its verdict). A contact is a measurement, not an accusation — it does not show what data was sent.
r-xx.bstatic.com
classified as cdn · 2
What our research panel found AI-drafted · human-reviewed
We ask several independent AI models the same question and publish their answers separately — cross-vendor agreement is evidence against fabrication, and disagreement is worth seeing. 3 of 3 models answered, overall confidence medium — classification split: anthropic=cdn, openai=first-party, gemini=cdn. A human reviewed this domain's claims before anything here published.
Anthropic Claude — cdn
bstatic.com is Booking.com's own static-asset domain (image/resource hosting) used by the Booking.com app, so this is first-party CDN infrastructure rather than a third-party tracker. Serving images/assets implies only routine request metadata, which is consistent with the app's declared collection of device IDs and diagnostics, so nothing here appears undisclosed.
OpenAI — first-party
The bstatic.com domain is commonly associated with Booking.com infrastructure, making this most likely a first-party service contact. The label declares broad collection including device IDs, app interactions, diagnostics, and search history, so the contact alone does not imply an undisclosed flow.
Google Gemini — cdn
bstatic.com is a known content delivery network domain used by Booking.com to deliver static media and assets. As standard first-party infrastructure traffic, it does not represent an undisclosed data tracking or sharing flow.
Apps measured contacting this domain
| App | Label gap | Donations | Contacts | Seen |
|---|---|---|---|---|
| Booking.com: Hotels & Travel | — | 4 | 16 | 2026-07-28 → 2026-07-29 |
The corpus grows one report at a time: donate your App Privacy Report — anonymous by design.
Think something here is wrong?
Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.