Privacy Policy

Last updated: May 18, 2026

CalmFlights ("we", "us") operates www.calmflights.com (the "Service"). This page tells you what data we collect, why, and what your choices are. We try to keep this short and in plain English.

What we collect

• Search inputs — origin, destination and date you enter to search flights. Used only to fetch results; not associated with your identity.
• Account data (only if you sign up) — email address and authentication tokens via our auth provider (Supabase).
• Anonymous usage analytics — page views, country and device type via Vercel Analytics. No cookies, no fingerprinting.
• Server logs — standard request logs (IP, user-agent, referrer, timestamp) retained for up to 30 days for security and debugging.

What we do not collect

• We do not sell or rent your data.
• We do not store payment card information — checkout is processed by Stripe (when enabled).

Cookies

We use cookies and similar technologies for the following purposes:

• Essential cookies — auth session tokens and preference storage (first-party, required for the Service to function).
• Analytics cookies — Vercel Analytics uses anonymous, cookieless measurement. No personal identifiers.
• Advertising cookies — We use Google AdSense to display ads on this site. Google and its partners may use cookies to serve ads based on your prior visits to this or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.

You may opt out of personalised advertising by visiting Google's Ads Settings or optout.aboutads.info. EU/UK/EEA residents will be asked for consent before personalised ads are shown.

Third-party services

• Google AdSense — displays advertisements on this site. Google uses cookies (including the DoubleClick cookie) to serve ads. See Google's advertising policy for details.
• Vercel — hosting and anonymous, cookieless analytics.
• Supabase — authentication and database (only when you create an account).
• Stripe — payment processing (only on subscription pages).
• Travelpayouts — when you click an external booking link, you are redirected to a partner site (e.g. Aviasales/Trip.com). Their privacy policies apply once you leave CalmFlights.
• OpenAI / Anthropic / Google AI — used for some content generation. We do not send personally identifying prompts.

Your rights

You can request access, correction or deletion of any account data by emailing us. EU/UK residents have rights under GDPR; California residents under CCPA. We respond within 30 days.

Children

The Service is not directed to children under 13 and we do not knowingly collect data from them.

Changes

We will update this page when our practices change. Material changes will be highlighted on the homepage.

Contact

Questions: hello@calmflights.com.