Privacy policy

Who we are

The controller of your personal data is , (“we”, “us”). You can contact us about anything in this policy at .

What we collect, and why

When you run the free check

The flight details you enter: airline, flight number, date, route, what happened, the arrival delay you report and the reason the airline gave. We do not ask for your name or email to show the result. We store the check and its result so that the result page works when you reload it or come back to it.

Lawful basis: performing the service you asked for (UK GDPR / GDPR Article 6(1)(b)).

When you buy a letter

Your email address, and optionally your name and booking reference, so the letter can be addressed correctly and we can send you the link to it. Lemon Squeezy, our merchant of record, collects your payment details directly; we never see your card number. Lemon Squeezy tells us your email address and an order reference when payment succeeds.

Lawful basis: performing our contract with you (Article 6(1)(b)); and, for the order reference we keep for refunds and our accounts, our legal obligations (Article 6(1)(c)).

Technical data

Our hosting provider records standard server logs — IP address, browser type, the page requested — for security and to keep the service running.

Lawful basis: our legitimate interest in keeping the service secure and available (Article 6(1)(f)). Logs are kept for no more than 30 days.

What we do not do

• We do not send marketing email.
• We do not sell, rent or share your data for advertising.
• We do not contact airlines, and we never send your data to one. You do that yourself, when you send your letter.
• We do not use tracking or analytics cookies. Your theme choice is stored in your own browser and never sent to us.

Who processes it for us

We use a small number of providers, each under a data processing agreement:

• Vercel — hosting and server logs.
• Neon (or Supabase) — the database where claims and letters are stored.
• Anthropic — drafts the letter after you pay. It receives the flight details and, if you gave them, your name and booking reference. Under Anthropic’s commercial terms, data sent through its API is not used to train its models.
• Resend — delivers the email with the link to your letter.
• Lemon Squeezy — takes payment as merchant of record. For payment data, Lemon Squeezy is an independent controller under its own privacy policy.

Some of these providers process data in the United States. Where they do, the transfer is covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or by the provider’s certification under the EU–US Data Privacy Framework and its UK extension.

How long we keep it

• Checks that are never paid for: deleted automatically 12 months after they were made.
• Paid claims and their letters: deleted automatically 24 months after purchase — long enough to cover the refund window and any follow-up.
• Server logs: up to 30 days.

You can have your data deleted sooner, at any time, using the form below.

Your rights

You have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to our use of it, and to receive it in a portable format. To use any of these rights, email . We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk) or, in the EU, to the data protection authority in your country. We would appreciate the chance to put it right first.

Delete your data now

Paste the link to your result or your letter (or just the claim ID in it). If you bought a letter, add the email you used at checkout. Deletion is immediate and permanent — the letter will no longer be available.