FlyVentis

Privacy Policy

Last updated: July 19, 2026

At FlyVentis, we care about your privacy. This page explains what data we collect, how we use it, and how you can exercise your rights.

1. Data we collect 5. Cookies and sessions 3. Third-party data providers 7. Security

1. Data we collect

When you sign in with Google, we collect only basic profile information:

Email address
Name / display name
Profile image (avatar)

We do not request access to sensitive Google services such as Gmail, Drive, Calendar, or Contacts. Your Google password is never shared with or visible to us.

Anonymous usage data collected when you allow analytics

If you enable the Analytics category in the cookie panel, we collect the following limited data to understand service usage and technical health:

Random anonymous visitor and session identifiers, which are one-way hashed on the server before being stored in the database.
The visited page path, page-view time, and count; URL query parameters are not stored.
Session start, last activity time, and interactive active-use duration.
FlyVentis API route, request method, response status, request count, and response duration; request and response bodies are not stored.
General device type: mobile, desktop, or tablet.

We do not store IP addresses, full device details, URL query parameters, account identifiers, or raw user content in analytics records. Analytics data is not linked to your Google account.

Active time increases only while the page is visible and there has been a recent keyboard, touch, scroll, or pointer interaction. Tabs left open in the background or unused for a long period are not counted as active use.

We apply a 90-day retention policy to detailed page-view and API performance records, 13 months to anonymous session summaries, and 7 days to technical batch identifiers used to prevent duplicate ingestion, periodically deleting expired records.

Measurement begins only after you allow Analytics. If you withdraw permission in the Cookies panel, new collection stops and anonymous analytics identifiers are removed from your browser; previously collected anonymous records are periodically deleted under the retention policy above.

2. In-app data we store

Your favorites (events, flights, countries, and places to visit)
Your saved searches
Your search and display preferences
Session cookies managed by Supabase Auth

This data is associated only with your account. Row-Level Security is applied at database level, so other users cannot access it.

3. Third-party data providers

Flight and event information comes from third-party providers such as Ticketmaster and PredictHQ. Search data may be technically sent to these providers. Their own privacy policies apply.

Cloudflare infrastructure and security services

FlyVentis uses Cloudflare for content delivery, hosting infrastructure, traffic routing, performance, DDoS mitigation, and malicious-traffic or bot protection. When a visitor connects to the site, traffic may first pass through Cloudflare's network.

While providing these services, Cloudflare may process limited technical traffic data such as IP address, request time, requested hostname or page path, HTTP request information, approximate location, and security events. This essential network and security processing does not originate from cookies, so rejecting optional cookies does not prevent Cloudflare from technically processing the connection.

FlyVentis does not store IP addresses in its own analytics database, and IP addresses in Cloudflare logs are not combined with FlyVentis analytics identifiers. The scope and retention of Cloudflare records depend on the Cloudflare product, account plan, and configuration in use; access is restricted to authorized administrators.

Cloudflare Privacy Policy

4. How we use data

Create your account and keep your session active
Personalize your favorites, routes, and preferences
Run flight and event searches
Keep the service secure, including abuse and spam detection

We do not sell your data. Advertising and affiliate tools run only when you approve marketing cookies in the cookie panel; those tools may have their own privacy policies and cookie practices.

5. Cookies and sessions

FlyVentis groups cookies and similar browser storage into four categories. Necessary cookies keep the site running; the other categories depend on your choice in the cookie panel.

Necessary: Supabase Auth session, sign-in, security, and remembering your cookie preference.
Preferences: Remembering language, region, theme, and similar user choices.
Analytics: Limited measurement of anonymous visitors and sessions, page views, interactive active time, API performance, and device type. If this category is off, these analytics measurements and event-click tracking are not performed.
Marketing and advertising: Advertising and affiliate tools such as Google AdSense and Travelpayouts. If this category is off, these third-party scripts are not loaded.

You can change your choice at any time from the Cookies button at the lower left of the page.

6. Your right to deletion

From your profile page, you can use the delete account option to immediately and irreversibly delete your account and all in-app data, including favorites, saved searches, activity history, and preferences.

After you enter the confirmation text, the request runs server-side and also removes your auth record.

7. Security

Communication over HTTPS
Data isolation with Row-Level Security
Secret API keys are stored only on the server side
Your Google password is never received or viewed by FlyVentis

8. Contact

You can contact us for privacy requests: info@flyventis.com