Privacy policy

The short version

We collect the minimum needed to run the service: your email if you create an account, the routes you save, and anonymous usage statistics. We don't run ads, we don't sell data, and we don't use cross-site tracking cookies. Payments are handled by Lemon Squeezy — we never see your card number.

Who we are

ihateflying.org is operated by [OPERATOR NAME / ENTITY]. For anything in this policy, contact us at [CONTACT EMAIL].

What we collect, and why

Without an account: nothing that identifies you. Flight searches are processed to answer your query and cached by route (not by person). Anonymous, cookieless analytics (Vercel Analytics) tell us which pages are used — they do not identify you or follow you across sites.

With an account: your email address (to sign you in), saved routes and search history you choose to keep, and your subscription status. Legal basis: performing the service you asked for.

If you subscribe: payment is processed entirely by Lemon Squeezy, our merchant of record. We receive your subscription status and a customer reference — never your card details.

Cookies

We use only essential cookies: the session cookie that keeps you signed in (Supabase Auth). There are no advertising, profiling, or third-party tracking cookies. Our analytics (Vercel Analytics) is cookieless by design.

Who processes data for us

Supabase (database and authentication), Vercel (hosting and anonymous analytics), and Lemon Squeezy (payments, as merchant of record). Each processes data under their own published terms and safeguards. Flight, weather, and tracking data shown to you comes from public sources (NTSB, FAA, NOAA, OpenSky, and others listed on our methodology page) — your queries to us are not shared with them in an identifying form.

Retention

Account data is kept while your account exists. Cached route data is depersonalized and kept to improve the service. Server logs rotate automatically on our hosting provider's schedule.

Your rights

You can request a copy of your data, correction, or complete deletion of your account and everything tied to it at any time: email [CONTACT EMAIL] from your account address and we'll confirm within 30 days. Depending on where you live (EU/EEA, UK, California, Korea, and elsewhere), these rights are also backed by law, and you may additionally complain to your local data-protection authority.

Children

The service isn't directed at children under 16, and we don't knowingly collect their data.

Changes

If this policy changes materially, we'll update the date above and note the change prominently. Continued use after a change means the updated policy applies.