Privacy Policy

The itinerary maker runs in your browser. Passenger names, dates, flight numbers, reference fields and every other detail you type stay on your device and are never uploaded to us. There is no account, nothing is saved, and closing the tab discards the document — which is why re-opening the maker starts from blank.

One narrow exception, stated plainly: when you enter an airport code the app does not already have bundled, it requests that code from our reference endpoint so it can fill in the airport’s name, coordinates and timezone. That request carries the airport codes and nothing else — no names, no dates, no document.

An account is optional and only needed for the paid tier. We collect the email address you sign in with, held by Supabase, which is what the sign-in link is sent to and what identifies your subscription. There is no password to store because sign-in is by emailed link.

Payment is processed by Stripe. Card data is handled directly by Stripe and we never see or store a full card number; we keep the Stripe customer and subscription identifiers needed to know whether your account is entitled. If you use the saved-document library, the documents you explicitly save are stored against your account and readable only by it.

Product analytics (PostHog) are off until you accept them in the cookie banner. Aggregate traffic measurement (Vercel Analytics) is cookieless. Page URLs are stripped of query strings and fragments before any analytics event is sent, so a document you are working on cannot leak through a link.

Account and billing records are kept while the account exists and for as long as tax and legal obligations require. Saved documents are kept until you delete them or delete the account. Email support@getflyproof.com to access or delete your data, subject to those retention requirements. We do not sell your data.