EN
Back to the flight list

Privacy policy

What we collect, what for, and what you can do about it.

Data controller
Michał Choma
Postal address
ul. Wojciecha Gersona 39A/9, 51-664 Wrocław
Contact
dev@tripradar.pl

What data we collect

Only the e-mail address you enter in the sign-up form, together with the alert settings you save alongside it: maximum price, countries, cities, departure airports, date and time ranges, and how often to send. We do not ask for your name or any other details.

The server records your IP address in technical logs when you sign up and when you sign in. This serves solely to limit the number of attempts and to prevent abuse.

Why, and on what legal basis

The address is needed for one thing: to send you alerts about cheap flights. The basis for processing is your consent — Article 6(1)(a) GDPR — given by signing up in the form and confirmed by clicking the link we send to that address. Without that confirmation we send nothing.

Rate-limiting sign-up and sign-in attempts rests on our legitimate interest (Article 6(1)(f) GDPR), namely protecting the service and other people's mailboxes from abuse.

How long we keep data

Until you unsubscribe. The unsubscribe link is in the footer of every message and works immediately. After unsubscribing, the address is marked as unsubscribed and receives no further messages; we delete it entirely on request sent to the contact address above. Records of sent offers are cleared after 7 days.

Who we share data with

To deliver a message, the address is passed to the party that delivers it: our outgoing mail provider — OVH SAS (poczta w domenie tripradar.pl). Beyond that we do not disclose addresses to anyone, do not sell them, and do not use them for any purpose other than flight alerts.

If you consent to it, we use Google Analytics 4 to learn how many people visit the site and which destinations are viewed most often. Data then goes to Google Ireland Limited, and Google may transfer it outside the European Economic Area — it does so under standard contractual clauses approved by the European Commission. The legal basis is your consent (Article 6(1)(a) GDPR).

Without consent none of this happens — the Google script is not loaded at all and the site works the same. You can withdraw consent at any time using the “Privacy settings” link in the footer; statistics stop working from that moment. Withdrawal does not affect the lawfulness of processing carried out earlier. Your IP address is truncated before storage.

The site contains no social media plugins. Clicking an offer takes you to the airline's or search engine's own site, where their own rules apply.

Cookies and browser storage

The service uses two cookies. fm_session remembers that you are signed in on the alert settings page and is strictly necessary for that page to work. fm_zalogowany carries only the fact that someone is signed in, so the page can show the right link in the header without asking the server. It holds no address and no other data about you.

Both are strictly necessary for the account pages, which is why they do not require consent. They are not used for tracking or advertising. They disappear when you sign out, and at the latest when the session expires.

Once you consent, Google Analytics stores its own identifiers (the _ga cookie and related ones), which let it recognise a returning browser. Google keeps them for up to two years. Your choice — consent or refusal — is stored in your browser under the key fm_zgoda, so that we do not ask on every visit.

Your rights

Automated decisions

We do not take decisions about you based solely on automated processing and we do not profile you. Which offers you receive follows from the filters you set yourself.

Language versions

This document is an English translation. In case of any discrepancy, the Polish version prevails — it is the original and the one the service operates under.