Privacy Policy

This Privacy Policy explains how Flight Sniper ("we", "us"), operated by Apledot (Paju, Gyeonggi-do, Republic of Korea), collects, uses and protects personal information when you use flightsniper.io or the Flight Sniper apps (the "Service").

1. Information we collect

Information you give us:

• Sign-in details — your email address. If you sign in with Google or Apple, we receive your name and email address from them (Apple may give us a private relay address instead). We do not use or store passwords: you sign in with Google, Apple or a one-time code sent to your email.
• Alerts and preferences — departure city, destination (or "anywhere"), the months you can travel, trip length, maximum price, nonstop preference, home city and email preferences.
• Billing records — plan or product (Premium, Trip Pass and the alert it is for), billing period, amount, currency, tax, card brand and the last four digits of your card, as provided by Lemon Squeezy. We never see or store your full card number. If you buy in the Flight Sniper app, we receive the product, price, purchase and renewal dates, free-trial and cancellation status and the store (App Store or Google Play) from RevenueCat; your payment details stay with Apple or Google.
• Trip descriptions — if you use "Describe your trip", the sentence you type (for example "Tokyo in March for a week, under $600") and the form fields we filled in from it.
• Push notification tokens — if you turn on notifications in the app.
• Messages — anything you send to support@flightsniper.io.

Information collected automatically:

• IP address and approximate location
• Browser type, version and language; operating system and device type
• Pages visited, referring page, search keywords and campaign (UTM) parameters that brought you to the Service
• Session identifiers and the date and time of access
• Booking clicks — when you click a Book link, we record the route, the price shown, the page the click came from, the time, your browser's user agent and a one-way hash of your IP address (not the IP itself), so we can count referrals to our booking partners.

We use this technical data for security, bot and fraud detection, and aggregate statistics. Sign-in tokens and session credentials are never written to visitor logs.

2. Legal basis for processing (GDPR / UK GDPR)

If you are in the European Economic Area or the United Kingdom, we rely on:

• Performance of a contract — to run your alerts, send the emails you asked for, and manage your account and subscription
• Legitimate interests — to keep the Service secure, prevent abuse, count affiliate referrals and understand aggregate usage, where these interests are not overridden by your rights
• Legal obligation — to keep order and tax records
• Consent — for push notifications, trip tips (our optional marketing messages), and analytics cookies and partner content where required

3. How we use your information

• Check fares and email you when a price matches your alert
• Send the deals emails you choose to receive
• If you opt in, send trip tips: partner offers (airport transfers, eSIM, things to do, car rental, insurance) for trips you watch
• Process and record subscription payments
• Contact you about your account and the Service
• Detect and prevent fraud, abuse, bot traffic and security threats
• Understand, in aggregate, how the Service is used and which campaigns bring visitors, so we can improve it
• Count and reconcile referrals to our booking partners

We do not sell your personal information. We do not use your data for automated decisions that have legal or similarly significant effects on you.

Trip tips (marketing messages)

Trip tips are optional and off unless you turn them on — on the sign-in page, on My alerts or in Settings. When a trip you watch reaches your price, or shortly before dates you clicked to book, we may email you (and, if you allow it, send a push notification) with partner offers for that destination. We send at most one trip tip a week and two a month. We record when and where you opted in. Every trip tip email has a one-click unsubscribe link, and you can switch them off in Settings at any time; this does not affect your price alerts. The links in trip tips are affiliate links (see section 5).

4. Storage, security and international transfers

We use industry-standard measures to protect your information, including encrypted connections. Flight Sniper is operated from the Republic of Korea, and our service providers may process data in other countries, including the United States. Where required, transfers are covered by appropriate safeguards such as Standard Contractual Clauses. No method of transmission over the internet is completely secure.

5. Service providers and partners

These providers process data for us or receive it when you use a feature. Each has its own privacy policy.

• Travelpayouts / Aviasales — provide the fare data we show and the affiliate booking links. When you click Book, you go to Aviasales or a partner booking site, which may set its own cookies so the booking can be credited to us. We may earn a commission. We do not send your name or email address to Travelpayouts or Aviasales.
• Travel partners through Travelpayouts — "Plan the rest of your trip" links to eSIM, car rental, tours, travel insurance and airport transfer sites (such as Yesim, Airalo, Saily, Economybookings, Klook, Tiqets, EKTA, Kiwitaxi and Welcome Pickups). These are affiliate links: when you click one, the partner site may set its own cookies so a booking can be credited to us. The link contains the destination and dates you were looking at, never your name or email address.
• Lemon Squeezy — processes subscription and one-time (Trip Pass) payments as the seller of record. Your payment details are entered on and handled by Lemon Squeezy.
• Apple (App Store) and Google (Google Play) — process purchases and subscriptions made in the Flight Sniper app, including payment, renewals, free trials, cancellations and refunds, under their own terms and privacy policies.
• RevenueCat — confirms in-app purchases with Apple and Google and tells us what you bought. It processes your Flight Sniper account number (not your name or email), the products you bought, transaction dates and your subscription status.
• OpenAI — if you use "Describe your trip", the sentence you type is sent to OpenAI's API to turn it into alert settings (cities, months, trip length, price). We do not send your name, email address or account details with it. Under OpenAI's API terms, this data is not used to train their models.
• Resend — delivers our emails (sign-in codes, alerts and deals emails). It processes your email address and the content of those emails.
• Google — "Sign in with Google" (only if you choose it), Google Analytics and Google AdSense advertising on the website (see Cookies below).
• Firebase Cloud Messaging (Google) — delivers push notifications in the Flight Sniper app if you enable them.

Links to other websites are provided for convenience; we are not responsible for their content or privacy practices.

6. Cookies

• Necessary cookies — keep you signed in, protect forms (CSRF) and remember your session. The Service does not work without them, so they are always on.
• Analytics cookies — Google Analytics sets cookies (such as _ga) to measure pages visited, time on site, device type and approximate location. We use this data in aggregate to understand how people use the Service.
• Partner content — on route and destination pages we can show tours and tickets from Klook in a widget loaded from Klook and Travelpayouts. When it loads, these partners may set their own cookies so a booking can be credited to us.
• Advertising cookies — the website (not the apps) shows ads from Google AdSense. Google and its partners use cookies to show ads and, with your consent, to personalize them based on your visits to this and other websites. Without consent for partner content you see non-personalized ads. You can also turn off personalized ads in Google's Ad Settings; see how Google uses cookies in advertising.

You choose analytics and partner content in the cookie banner, and you can change your choice at any time with Cookie settings at the bottom of every page. In the UK, EEA and Switzerland both stay off until you accept them. We do not use advertising cookies on flightsniper.io. Booking sites you visit through our links may set their own cookies. You can also block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google's browser add-on. Blocking necessary cookies will stop you from signing in.

7. Your rights

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data (most of it can be changed in your account settings)
• Delete your data (see section 8)
• Restrict or object to certain processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time where we rely on consent

To use these rights, email support@flightsniper.io. If you are in the EEA or UK, you can also complain to your local data protection authority.

8. Account deletion and retention

You can delete your account at any time, on the website or in the app:

• Sign in at flightsniper.io or in the Flight Sniper app.
• Open Settings (in the menu).
• Choose Delete my account, type DELETE and confirm.

If you can't sign in, email support@flightsniper.io from the address on your account and we will delete it within 30 days.

When you delete your account, we delete your alerts, saved routes and push notification tokens and replace your name and email address with anonymized values, so the remaining records can no longer be linked to you.

Order and transaction records are kept in anonymized form for legal, tax and accounting purposes. Visitor log data (IP address, browser, device type, page paths) is kept for up to 12 months. Booking-click records contain only a hashed IP address and are kept for affiliate reporting. Trip descriptions are kept for 90 days to prevent abuse and improve the feature, then deleted. For active accounts, we keep your information for as long as your account exists or as needed to provide the Service.

9. Data breach notification

If a data breach is likely to put your rights and freedoms at risk, we will tell affected users without undue delay and, where required by law, notify the relevant supervisory authority within 72 hours of becoming aware of it.

10. California residents (CCPA)

If you live in California, you have the right to know what personal information we collect about you, to ask us to delete it (subject to some exceptions), and not to be discriminated against for using these rights. We do not sell personal information, so there is nothing to opt out of. Contact support@flightsniper.io to make a request.

11. Children's privacy

Flight Sniper is not intended for anyone under 18 (or 16 in the EEA where applicable). We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact support@flightsniper.io and we will delete it.

12. Changes to this policy

We may update this policy. We will post the new version on this page and update the date above; for significant changes we will also email you.

13. Contact and data controller

Apledot
Paju, Gyeonggi-do, Republic of Korea
Email: support@flightsniper.io