The short version
We don’t set advertising cookies or build advertising profiles. Browsing, saving fares and setting targets happen on your device. Only if you explicitly enable browser alerts do we send the anonymous push subscription and fare targets described below.
Who manages flight.deals
flight.deals is managed in Italy by Gabriele Masetti. For privacy questions, data requests or corrections, use the contact page.
What stays on your device
The watchlist and price tools use your browser’s local storage. These keys stay on your device unless you explicitly enable browser alerts, in which case only active saved-fare ids and targets are synchronized as described in the next section:
fd:saved— ids of the deals you hearted.fd:prices— the price each saved deal had when you saved it, so we can show the change since.fd:targets— the target price you set on a saved deal.fd:recent— the last few route pages you opened, for the “recently viewed” rail.fd:origin— the departure city you selected, so the homepage can reopen on your board.fd:push-enabled— whether this browser previously opted into price alerts.
Clearing flight.deals site data removes these local preferences. If browser alerts are enabled, use Turn off first to delete the synchronized targets immediately; otherwise the server copy expires automatically after 180 days.
Using your nearest departure board
The homepage can use your device location only when you press Use nearest and accept the browser’s permission prompt. Your coordinates are compared with our tracked departure cities inside your browser: they are not transmitted to us, written to storage or included in analytics. We remember only the three-letter airport-city code selected by that comparison. You can refuse the permission and choose a departure city manually; the rest of the site works identically.
What we collect
- Analytics: none. This build loads no analytics script at all. If that changes we will name the provider here — the intended one is Cloudflare Web Analytics, which is cookie-free.
- Deal alerts: the list is not open yet, and no signup form on this site accepts an address. We hold no subscriber data.
Images and airline marks
Destination photography and airline marks are stored with the site and served from flight.deals. Loading an ordinary page image therefore does not contact Unsplash, Aviasales or another image host. An external booking platform receives a request only when you choose to follow its link.
We embed no social widgets, no ad tags and no fonts from third-party hosts. When browser alerts are available, the OneSignal SDK is the only optional third-party script and it is loaded only after the visitor asks to enable notifications.
When you click through to book
Outbound Check fare and toolkit links carry an affiliate marker. The booking partner sets its own cookies on its own site to attribute the click, and from that point its privacy policy applies, not ours. We never see your search, your booking or your payment details — only aggregate commission reports that identify no one.
When a click passes through our own redirect endpoint, we record the route, the seller and an internal offer identifier, so we can tell which pages are worth keeping. That record contains no IP address, no user agent, no referrer and nothing else about you; it describes the offer that was clicked, not the person who clicked it. Records are discarded automatically after 90 days.
Legal bases
- Legitimate interest (Art. 6(1)(f) GDPR) — serving and securing the site, measuring traffic in aggregate, and attributing affiliate clicks so the site can be funded. You can object at any time through the contact page above.
- Consent (Art. 6(1)(a) GDPR) — email subscriptions when available and browser notifications when you enable them. Consent can be withdrawn through the unsubscribe link or the Turn off control in Saved fares.
International transfers
The site is served from a global CDN, and the image hosts, booking partners named above may operate servers outside the EEA, including in the United States. Where a transfer of personal data happens it rests on those providers’ own safeguards (typically the European Commission’s standard contractual clauses). We transfer nothing ourselves beyond what a page request unavoidably reveals.
Our privacy commitments
- We do not sell or share your email address.
- We do not track you across other websites.
- We do not store payment details — bookings happen entirely on the booking platform’s site.
Your rights
You can ask for access to, correction of, or deletion of any data we hold about you, and you can object to processing based on legitimate interest. Use the contact page; in practice, the only personal data we are likely to hold is a message you sent, a newsletter subscription or an anonymous browser-alert record you explicitly enabled.
If you are in the EEA or the UK and you think we have got this wrong, you may complain to your national data protection supervisory authority. You do not need to contact us first.