Privacy Policy
Last updated: 14 July 2026
Short version: we collect your email address only if you ask for price alerts or create a free account, we never sell it, we use no advertising trackers, and you can delete everything yourself from your account page — or with one email.
What we collect
- If you set up a price alert: your email address, the routes or destinations you asked us to watch, and — if you used the free-text box — the sentence you typed, which we keep so we can re-interpret your request if you edit it.
- If you create a free account (to unlock the full board): your email address, your saved home airports if you set any, and a session cookie that keeps you signed in on your device. Sign-in is passwordless — we never store a password. The session cookie is functional only, not used for tracking or advertising.
- If you just browse: we do not retain your raw IP address. For basic funnel measurement and abuse prevention, we briefly process technical request data. Product events use a secret-keyed, daily-rotating pseudonymous session identifier; it cannot be used to follow you across days. We use one functional cookie if you set a home airport (it stores the airport code on your device; it never reaches an advertiser).
- If you ask the radar a question: we retain the question and whether matching deals were found so we can understand demand and improve coverage. We do not store your raw IP with the query. If you are signed in, the query may be associated with your account email.
Analytics
We use Ahrefs Web Analytics, a cookie-less, privacy-focused analytics tool. It gives us aggregate page-view counts without cookies, fingerprinting, or cross-site tracking. There is no Google Analytics, no ad pixels, and no tracking cookies on this site — which is why you don't see a cookie banner.
How email alerts work
- Double opt-in: we only activate a watch after you click the confirmation link we email you.
- Auto-purge: if you never confirm, your email and watch are deleted automatically after 7 days.
- Unsubscribe: every email we send contains a one-click unsubscribe link. Unsubscribing deactivates all your watches immediately.
- We send only what you asked for: confirmation emails and deal alerts. No newsletters, no marketing, no sponsored emails — ever.
Who we share data with
Nobody, with one technical exception: emails are delivered through Resend, our email provider, which processes your address solely to deliver our messages. We never sell, rent, or share your data for marketing.
Deleting your data
Self-serve: if you have an account, open your account page and use “Delete my account & data” — it immediately erases your account, saved airports, watches, and send history. By email: write to alerts@flightwhisper.net from the address you registered and ask for erasure. Unsubscribing via the link in any email stops all sending immediately; erasure removes the records entirely.
Retention
- Unconfirmed signups: deleted after 7 days.
- Confirmed watches and account data (email, home airports): kept while active; deleted on erasure request or self-serve account deletion.
- Send logs: deleted within 30 days. Rate-limit records: deleted within 2 days.
- Pseudonymous product events and radar questions: deleted within 90 days.
Contact
Privacy questions or erasure requests: alerts@flightwhisper.net. Data-controller identity details will be published here shortly.