Privacy Policy

What we collect

Your email address (for login links and alerts), the alert settings you create (airports, dates, budgets), trips you log in the 90/180 tracker, and standard server logs. That's it — no passwords (login is by email link), no payment card data (Paddle handles payment entirely), no advertising trackers, no analytics cookies. The only cookie we set is the session cookie that keeps you signed in.

How it's used

To run your alerts, send you the emails you asked for, and operate the Service. We never sell or rent your data.

Who processes it for us

• Fly.io — application hosting (servers in the EU region we deploy to).
• Resend — sends login links and alert emails.
• Paddle — merchant of record for subscriptions; sees your billing details, we don't.
• Travel data providers — your searches (routes, dates — never your identity) are sent to flight/hotel data APIs to find prices.

Retention and deletion

Data is kept while your account exists. Email jason@thegrapebrokers.com to delete your account and all associated data, export what we hold about you, or ask anything about this policy. Deletion requests are honored within 30 days.

Changes

If this policy changes materially we'll email you before the change takes effect.