Privacy Policy

Last updated: May 18, 2026

CalmFlights ("we", "us") operates www.calmflights.com (the "Service"). This page tells you what data we collect, why, and what your choices are. We try to keep this short and in plain English.

What we collect

• Search inputs — origin, destination and date you enter to search flights. Used only to fetch results; not associated with your identity.
• Account data (only if you sign up) — email address and authentication tokens via our auth provider (Supabase).
• Anonymous usage analytics — page views, country and device type via Vercel Analytics. No cookies, no fingerprinting.
• Server logs — standard request logs (IP, user-agent, referrer, timestamp) retained for up to 30 days for security and debugging.

What we do not collect

• We do not sell or rent your data.
• We do not run third-party advertising trackers (no Facebook Pixel, no Google Ads tag at the time of writing).
• We do not store payment card information — checkout is processed by Stripe (when enabled).

Cookies

We use a minimal set of first-party cookies for essential functionality (auth session if you log in, preference storage). We do not use cookies for cross-site advertising.

Third-party services

• Vercel — hosting and analytics (anonymous, cookieless).
• Supabase — authentication and database (only when you create an account).
• Stripe — payment processing (only on subscription pages).
• Travelpayouts — when you click an external booking link, you are redirected to a partner site (e.g. Aviasales/Trip.com). Their privacy policies apply once you leave CalmFlights.
• OpenAI / Anthropic / Google AI — used for some content generation. We do not send personally identifying prompts.

If we add advertising

If we later add advertising (e.g. Google AdSense), this page will be updated to disclose ad cookies and your opt-out options. Personalized advertising will require explicit consent in the EU/UK/EEA via a Consent Management Platform.

Your rights

You can request access, correction or deletion of any account data by emailing us. EU/UK residents have rights under GDPR; California residents under CCPA. We respond within 30 days.

Children

The Service is not directed to children under 13 and we do not knowingly collect data from them.

Changes

We will update this page when our practices change. Material changes will be highlighted on the homepage.

Contact

Questions: hello@calmflights.com.