Privacy Policy

1. Information We Collect

We collect information that you provide directly to us when using Flight Sniper:

• Account information such as your email address and password (stored as a secure hash)
• Flight monitoring preferences including origin, destination, travel dates, departure and arrival time preferences, trip type (one-way or round-trip), number of passengers, cabin class, maximum stops, target price, and nearby airport settings
• Order and billing records including plan type (subscription or one-time pass), amount charged, currency, tax, card brand, and last four digits of your card — processed and provided by Lemon Squeezy
• Push notification tokens if you enable browser push notifications
• Communications you send to us via email at support@flightsniper.io

We also automatically collect the following technical data when you visit the Service:

• IP address and approximate geographic location
• Browser type, version, and language
• Operating system and device type (Desktop / Tablet / Mobile)
• Pages visited and navigation paths within the Service
• Referring URL and search keywords used to find the Service
• URL query parameters from pages you visit
• Session identifiers (not linked to authentication tokens)
• Date and time of access

This technical data is collected for service improvement, security monitoring, bot detection, and aggregate analytics. Authentication tokens and session credentials are never logged or stored in visitor records.

2. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following lawful bases:

• Performance of a contract — Processing necessary to provide the Service you have signed up for, including flight monitoring, alerts, and account management
• Legitimate interests — Improving our Service, preventing fraud, ensuring security, detecting bots, and generating aggregate analytics, where these interests are not overridden by your rights
• Legal obligation — Retaining order and transaction records as required by applicable law
• Consent — Where you have explicitly opted in, such as for push notifications, marketing emails, or analytics and advertising cookies

3. How We Use Your Information

We use the information we collect to:

• Monitor flight prices and send alerts based on your criteria
• Process and record your subscription payments
• Communicate with you about your account and the Service
• Detect and prevent fraud, abuse, bot traffic, and security threats
• Analyze aggregate usage statistics to improve the Service and inform partnership reporting (e.g., popular routes, visitor counts — no personally identifiable data is shared)
• Serve and measure the effectiveness of advertisements within or related to the Service
• Understand how users interact with the Service through analytics tools

We do not sell your personal information to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Data Storage, Security, and International Transfers

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Your data is stored on secure servers with encrypted connections. Passwords are hashed and never stored in plain text.

Flight Sniper is operated from the Republic of Korea. Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our third-party service providers operate. These transfers are carried out under appropriate safeguards, including Standard Contractual Clauses where required by applicable law. While we strive to protect your information, no method of transmission over the Internet is completely secure.

5. Third-Party Services

Flight Sniper integrates with the following third-party services. Each has its own privacy policy governing the use of your information.

• FlightAPI.io — Used to retrieve flight price data. Your search preferences (origin, destination, dates, cabin class, etc.) are sent to this service to perform price lookups.
• Travelpayouts — Used as an affiliate partner to provide booking links. When you click through to book a flight, you may be redirected via Travelpayouts affiliate links. We may earn a commission on qualifying purchases at no additional cost to you.
• Lemon Squeezy — Used to process subscription payments. Your payment information is handled directly by Lemon Squeezy. We store a record of your order including plan type, amount, currency, tax, card brand, and last four digits as provided by Lemon Squeezy upon payment confirmation.
• Google Analytics — Used to analyze traffic and usage patterns. Google Analytics collects data such as pages visited, time on site, device type, and approximate location via cookies and similar technologies. This data is processed by Google and used in aggregate to help us understand how users interact with the Service. Google may process this data in accordance with their own privacy policy.

We are not responsible for the privacy practices of these third-party services. Links to external websites within the Service are provided for convenience; we are not responsible for the content or privacy practices of those sites.

6. Cookies and Tracking Technologies

Flight Sniper uses cookies and similar tracking technologies. We use the following categories:

• Essential cookies — Required for the Service to function, including authentication, session management, and CSRF protection. These cannot be disabled.
• Preference cookies — Used to remember your settings and preferences across sessions.
• Analytics cookies — Used via Google Analytics and Hotjar to understand how users interact with the Service, measure traffic, and improve features. These are only loaded with your consent where required by applicable law.
• Marketing/Advertising cookies — Used to serve relevant advertisements and measure their effectiveness. We do not share your personal data with advertisers. These are only loaded with your consent where required by applicable law.

Where required by law (e.g., for users in the EEA or UK), non-essential cookies will only be activated after you provide consent via our cookie consent banner. You can withdraw consent or change your cookie preferences at any time through your browser settings. Disabling essential cookies will prevent you from using the Service.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Rectification — Correct inaccurate or incomplete data through your account settings
• Erasure — Request deletion of your personal data (see Section 8 for details)
• Restriction — Request that we limit processing of your data in certain circumstances
• Data portability — Receive your data in a structured, machine-readable format
• Objection — Object to processing based on legitimate interests
• Withdraw consent — Withdraw consent at any time where processing is based on consent (e.g., push notifications, analytics cookies)

To exercise any of these rights, contact us at support@flightsniper.io.

If you are located in the EEA or UK, you have the right to lodge a complaint with your local Data Protection Authority (DPA) if you believe we have not handled your data lawfully.

8. Account Deletion and Data Retention

You may delete your account at any time from your account settings page. Upon deletion, we immediately anonymize your personal identifiers in compliance with GDPR and similar regulations:

• Your name is replaced with an anonymized placeholder
• Your email address is replaced with an invalidated, non-identifiable string
• Your password is replaced with a cryptographically random value

Certain records such as order and transaction history may be retained in anonymized form for legal, tax, and regulatory compliance purposes. These records cannot be linked back to you after anonymization. Flight monitoring targets and price history associated with your account are deleted upon account deletion.

Visitor log data (IP address, browser, device type, page paths) is retained for a maximum of 12 months and then purged. For active accounts, we retain your personal information for as long as your account exists or as needed to provide the Service.

9. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and, where required by law, notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Notification will be provided via email to the address associated with your account and/or through a prominent notice on the Service.

10. California Residents (CCPA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete — Request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out — We do not sell your personal information. You therefore do not need to opt out of a sale.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights

To exercise these rights, contact us at support@flightsniper.io.

11. Children's Privacy

Flight Sniper is not intended for use by individuals under the age of 18 (or 16 in the EEA where applicable). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child below the applicable minimum age, we will take immediate steps to delete such information. If you believe a child has provided us with personal information, please contact us at support@flightsniper.io.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will also send an email notification to your registered address. Your continued use of the Service after any modifications constitutes your acceptance of the updated Privacy Policy.

13. Contact and Data Controller

The data controller responsible for your personal information is:

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at the email above. We are committed to resolving any privacy-related issues and will respond to your inquiry as promptly as possible.