The full and formal version is the privacy policy. This is the plain one.
What we hold
- Your email address, and a scrypt hash of your password. The hash is not reversible, and a copy of our database is not a way into your account.
- If you signed in with Google or Apple, the identifier that provider gave us, and the email on it.
- The routes and dates you asked us to watch, and the searches those produced.
- The alerts you were sent, and which channel they went to.
- A salted hash of your IP address for rate limiting the free search. Not the address itself.
- Anything you write to us on the contact form, including the page you were on when you wrote it.
What we never hold
- Card numbers or bank details. Payments go through a processor and the card never touches our servers.
- Passenger names, passport numbers or dates of birth. We do not book, so we never need them.
- Advertising or cross-site tracking identifiers. There are none in this product.
Who else sees anything
- The flight data providers see the route and the dates being searched. They do not see who asked.
- The payment processor sees your payment details, because it is the one taking the payment.
- Your browser fetches fonts and a couple of scripts from public CDNs, which see your IP address like any website request. This is named in the cookie note.