Privacy Policy

Who we are

FlexTrip Alerts ("we", "us") operates this website, which helps travellers track flight prices for flexible dates and notifies them by email when fares meet their chosen price limit. For privacy requests contact us at privacy@flextripalerts.com.

What data we collect

• Account data: email address and a securely hashed password (if you sign up with email), or your Google account id and email when you use Google sign-in. Optional profile fields you enter (display name, country and city of residence).
• Watcher data: routes, date windows, stay lengths, price limits, and optional filters you choose.
• Technical data: session cookie, IP address (for rate limiting and security), and timestamps of scans and emails sent.
• Usage data: outbound deal clicks logged via our redirect page, in aggregate to understand which routes perform well.

Why we process your data (legal bases)

• Contract: to create your account, run your watchers, and send price-alert emails you asked for.
• Legitimate interests: to secure the service, prevent abuse, and improve route coverage (balanced against your rights).
• Consent:for non-essential cookies and advertising where required by law (see Google's consent message on the site).

Who we share data with

We do not sell personal data. We use processors where needed:

• Hosting & database — to run the website and store your account.
• Email provider (SMTP) — to deliver verification, reset, and alert messages.
• Google— if you choose "Continue with Google", Google processes your sign-in under their privacy policy. We receive your email and a unique account id, not your Google password.
• Flight price data providers — we look up fares by route to power alerts and deal pages; we do not send them your email.
• Advertising partners — only if you consent to cookies; subject to their own policies (including Google AdSense).
• Google Analytics — if you consent to analytics cookies, Google processes page views and technical data under Google's privacy policy. We do not receive your email from Analytics.

International transfers

Processors may store or process data outside your country (including outside the EU). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses offered by our providers.

Cookies and advertising

We use a strictly necessary http-only cookie to keep you logged in. With your consent, we use Google Analytics 4 for aggregated traffic statistics and Google AdSense for advertising. Google's consent message (CMP) controls optional cookies in the EEA, UK, and Switzerland. Affiliate and ad partners may set their own cookies under their policies. We also log outbound deal clicks on our servers (not via third-party analytics cookies) to understand which routes perform well.

Affiliate links

Outbound booking links may be affiliate links. If you book after clicking, we may earn a commission at no extra cost to you.

How long we keep data

• Account and watcher data — while your account is active.
• Alert history — to prevent duplicate emails and show you past matches.
• Sessions — until expiry or logout; expired sessions are deleted when encountered.

You may delete individual watchers from Watchers, or delete your whole account under Account → Security.

Your rights (GDPR / similar laws)

If you are in the EU/EEA, UK, or similar jurisdictions, you may:

• Access the personal data we hold about you.
• Correct inaccurate data (e.g. update watchers in your account).
• Delete your data ("right to erasure").
• Object to or restrict certain processing.
• Withdraw consent for optional cookies at any time.
• Lodge a complaint with your local data-protection authority if you believe we handled your data unlawfully.

To exercise these rights, email privacy@flextripalerts.com. Unsubscribe from alert emails anytime via the signed link in each email, or turn alerts back on from Account → Profile.

Security

Passwords are hashed with bcrypt. Traffic is encrypted with HTTPS. Alert unsubscribe links are cryptographically signed so they cannot be guessed.

Children

The service is not directed at children under 16. We do not knowingly collect data from children.

Changes

We may update this policy. Material changes will be reflected by the "Last updated" date above.