Privacy and cookies

FlightWatch shows flight status, a live map for account holders, and sends alerts you ask for.

What we store

• Your account: your email address, and your Google account ID if you sign in with Google (we ask Google only for your email address). Legal basis: the account you asked for.
• The flights you track, so we can send the alerts you asked for.
• Pro subscription status: whether you are Pro and until when, plus the Stripe customer and subscription IDs (web) or the Google Play purchase token (Android app). We never see or store card details. Legal basis: our contract with you.
• Push alert endpoints (Pro, only if you turn push alerts on): the address your browser or phone gives us to deliver notifications. Turning push alerts off deletes it.
• Your country (market) from your browser language or our CDN, to show offers that are available where you are. No IP address is stored.
• Offer impressions and clicks with a random reference (subid) so we can match them to our partners' reports. These records contain no personal data.

How long we keep it

• Unconfirmed email addresses and trackings: 48 hours.
• Finished trackings and their alert history: 30 days after the flight.
• Your account: until you delete it (one tap on your account page). Unused accounts that never confirmed their email: 48 hours.
• Sign-in and deletion links: until used or expired (24 hours).
• Offer impression/click records (no personal data): 13 months.

Who processes it

Emails are delivered by our email provider (Resend). Hosting is on Fly.io, behind Cloudflare. Payments on the website are handled by Stripe and in the Android app by Google Play; each is responsible for your payment details. Google sign-in is provided by Google. Flight data comes from the sources listed on Data sources; we never send them your email address.

Your rights

• Every alert email has a one-click unsubscribe link.
• See and stop your alerts at My alerts.
• Delete your account and all your data at any time: instantly from your account (this also cancels a Pro subscription), or via delete my data (we email a confirmation link).

Cookies

We only set essential cookies unless you opt in:

• fw_session (essential, 30 days): keeps you signed in to your account.
• fw_oauth (essential, 10 minutes): protects Google sign-in against forgery while you sign in.
• fw_app (essential, until you close the app): remembers that you are using the Android app, so purchases go through Google Play.
• fw_consent (essential, 180 days): remembers your cookie choice.

We currently use no analytics or marketing cookies. Affiliate links are tracked on our own server with a random reference in the link — no third-party cookies.