Privacy for flight search, tracking and My AirSuq.

Privacy summary

You can search AirSuq without creating an account. Optional account features are used to keep tracked flights and notification settings across sessions and devices. AirSuq does not ask for payment-card or passport information and does not sell flight tickets.

Last updated: 28 August 2026.

Information processed

• Flight-search data: origin, destination, dates, currency, direct-flight preference, selected flight and related search results.
• Price and prediction data: fare observations, market snapshots, prediction snapshots and later outcome labels used to operate and evaluate the service.
• Optional account data: email address, username, account timestamps and email-verification status. Passwords are stored as one-way password hashes rather than plaintext passwords.
• Tracked-flight settings: flights saved to My AirSuq, the notification event preferences selected for each flight, and account-level delivery-channel choices. Tracked-flight email is off by default and must be enabled by the account holder.
• Notification-device data: when mobile push notifications are used, AirSuq may store a device identifier, platform, app version, push provider and push token so a requested alert can be delivered.
• Authentication and security data: session-token hashes, session timestamps and user-agent information. Authentication endpoints also use rate-limit records to reduce abuse.
• Technical request data: hosting and network infrastructure may process IP addresses, request timestamps, user-agent information and security logs. The legacy public web rate limiter also uses an IP address transiently in application memory. To estimate daily unique visitors even when optional analytics is declined, AirSuq derives a keyed daily hash from the request IP and date; the raw IP is not stored by this counter, hashes cannot be linked across days, and the temporary hash rows are deleted after a short retention period.
• Browser preferences: language and currency preferences may be stored in browser local storage. The account flow may use short-lived session storage to resume a user-requested “track this flight” action after login.
• Optional analytics: if you grant analytics consent, AirSuq uses Google Analytics 4 to receive aggregated page-view and product-event data such as visits, searches and feature interactions. Analytics is not loaded when you choose “Only necessary”. AirSuq does not send account emails, usernames or raw authentication data to Google Analytics.

Why the data is used

AirSuq processes these data to perform flight searches and predictions, maintain optional accounts and sessions, save tracked flights, send requested verification/reset messages and user-selected notifications, protect the service from abuse, diagnose errors, control third-party API usage, evaluate recommendation outcomes and improve the product and its models. Optional analytics data is used only to understand product usage, improve the interface and measure feature adoption after consent.

Service providers

AirSuq relies on hosting, database, DNS/security, flight-data and other infrastructure providers. Those providers may receive the technical or flight-query data needed to perform their role.

If transactional email is enabled, the configured email-delivery provider receives the destination email address and message content needed to send account verification, password-reset or user-enabled tracked-flight notification messages. If mobile push delivery is enabled and the account allows push, the configured push provider receives the device push token and the notification payload needed to deliver the alert.

AirSuq does not sell personal data to advertisers. Optional Google Analytics 4 is used only after the visitor grants analytics consent; it is not loaded when analytics is declined. The current product does not use analytics to identify account holders or send them targeted advertising.

Cookies and browser storage

For signed-in web accounts, AirSuq uses essential authentication cookies. Access and refresh credentials are stored in HttpOnly cookies so normal page JavaScript does not need to read the raw authentication tokens. Production cookies are configured for secure HTTPS use and use SameSite restrictions.

Language and currency preferences can be stored locally in your browser. Your analytics choice is stored locally so AirSuq can remember it. If analytics is accepted, Google Analytics may use its own measurement cookies or identifiers. Clearing browser cookies or storage may sign you out, remove local preferences or reset your analytics choice. You can change the choice at any time: Manage analytics preferences.

Notification choices

Account holders can choose which tracked-flight event types they want and can separately control delivery channels. Tracked-flight email starts disabled. Enabling it applies only from the account's activation point onward; disabling and later re-enabling it does not cause notifications from the disabled period to be sent later. Push can also be disabled independently of registered device state.

System-wide email or push availability may be disabled even when an account preference is enabled. A user preference does not override a system safety gate.

Account deletion and shared flight data

When an account is deleted through My AirSuq, the service disables and anonymizes the account identity, removes active authentication sessions and one-time account tokens, removes the account's tracked-flight subscriptions, notification preferences, registered push devices and account-linked notification events/deliveries, and removes the account link from retained API search records.

Shared flight, fare, market and prediction observations are not deleted merely because an account is deleted. Those records describe flights and model outcomes rather than the deleted account and can remain available for operating and evaluating AirSuq. Infrastructure/security logs held by service providers may also remain for their applicable operational or security retention periods.

Your choices and contact

You can search without an account, change event and delivery-channel preferences, stop tracking individual flights, log out, clear browser storage, or delete an AirSuq account from the account area when those features are enabled. Depending on your jurisdiction, you may also have rights relating to personal data processed about you.

Privacy requests can be sent to [email protected]. This address is intended for privacy and data-related requests.