Last updated: September 20, 2026

Introduction

My Flight Routes ("we", "us", "our") values your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our service, whether you use offline mode or create an account.

Information We Collect

We collect information in several ways:

• Offline Mode Data: When using offline mode, flight data is stored only in your browser's local storage. We do not have access to this data. We collect minimal analytics such as page views and browser type.
• Account Information: If you create an account, we collect your email address and authentication credentials through our authentication service.
• Flight Data: When you add flights (in account mode), we store origin, destination, date, time, flight number, duration, and any notes you add.
• Boarding Pass Scanning: If you use the boarding pass scanner, your browser asks for camera access, and the camera is active only while the scanner is open. The barcode is read entirely on your device: no image, video or barcode content is sent to our servers or to any third party. A boarding pass barcode also contains your name and booking reference; these are discarded and never stored. The only data kept is the flight you choose to add (airports, flight number, date and seat number as a note), stored exactly as a flight you typed in would be, in your browser in offline mode or in your account. You can revoke camera access at any time in your browser settings.
• Device Information: We may collect information about your device, including operating system, browser type, and IP address for analytics and performance monitoring.

How We Store Your Data

• Offline Mode Storage: Data is stored entirely in your browser's local storage. It is not transmitted to our servers. Clearing your browser data will delete this information.
• Account Mode Storage: Flight data for account holders is encrypted and stored in secure cloud servers with industry-standard security measures.

Data Retention

Offline mode data is retained in your browser until you clear it. Account data is retained as long as your account is active. You can delete your account and all associated data at any time by contacting us. Deleted data is permanently removed within 30 days.

Third-Party Services

We use industry-standard third-party cloud services for authentication, storage, and monitoring to ensure security and reliability.

• Cloud Infrastructure: Cloud infrastructure hosting our application and databases with enterprise-grade security and encryption standards.
• Authentication Service: Authentication service that securely handles account sign-up, login, and credential storage.
• Monitoring Service: Performance monitoring and logging service. These logs may contain anonymized usage data but not your flight information.
• AI Insights Service: OpenAI API is used to generate personalized flight insights when you request them. Your flight data is transmitted securely to OpenAI for analysis only and is not retained for training purposes. Please review OpenAI's privacy policy for more details.
• Flight Search Services: When you click on "Search Flights" links to find flights, you will be redirected to Google Flights. The flight details (origin, destination, and date) are passed to Google through the URL to help you search for that specific route. This is a direct link and we do not track or receive any information from this interaction. Please review Google's privacy policy for how they handle your data.

Your Rights

Depending on your location, you may have the following rights:

• Right to Access: You can request a copy of your personal data
• Right to Delete: You can request deletion of your account and data
• Right to Export: You can export your flight data in CSV format anytime
• Right to Correct: You can correct inaccurate information
• Right to Withdraw Consent: You can withdraw consent for data processing

Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

Cookies and Tracking

We use essential cookies necessary for authentication and session management. If you accept analytics cookies, we also use Google Analytics and Microsoft Clarity to understand how the site is used. If you decline, or have not chosen yet, Google Analytics runs in a consent-denied mode that measures visits without cookies and without storing anything on your device, and Microsoft Clarity is not loaded at all. We ask everyone, wherever they are, and nothing is enabled until you accept. You can change your choice at any time using the button below.

On selected pages, we also display advertisements through Google AdSense, which uses cookies, including the DoubleClick cookie, to serve ads based on your interests and prior browsing activity. You can manage your ad preferences or opt out of personalized advertising at any time via Google's Ads Settings.

Payment Processing (Stripe)

If you buy the optional upgrade, payment is handled entirely by Stripe. Your card details are entered on Stripe's own checkout page and never reach our servers, so we cannot see or store them. Stripe receives the email address you enter and the payment information needed to process the charge, under its own privacy policy. On our side we store only a record that your account is upgraded: the amount and currency paid, and Stripe's reference identifiers for the payment, which let us match a purchase to your account for support and refunds. We do not use this information for advertising or share it with anyone else.

Online Advertising (Google AdSense)

We display advertisements provided by Google AdSense on selected pages of our website. Google AdSense uses cookies, including the DoubleClick cookie, to serve ads based on your prior visits to this site and other websites. These cookies allow Google and its partners to show you more relevant ads based on your browsing activity. You may opt out of personalized advertising by visiting Google's Ads Settings at adssettings.google.com, or opt out of third-party vendor cookies for personalized advertising at aboutads.info. Please review Google's Privacy Policy at policies.google.com/privacy for full details on how Google collects and uses data.

Affiliate Links

Some "Search Flights" and "Check prices" buttons on My Flight Routes are affiliate links. If you click one and complete a booking through a partner site (such as KAYAK), we may earn a small commission at no extra cost to you. Our affiliate partners may collect data in accordance with their own privacy policies.

Children's Privacy

My Flight Routes is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date above.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us.