Privacy Policy

What data we collect

We collect minimal data to operate the service:

• Approximate location (the browser contacts ipapi.co, which receives the requesting IP address and returns city and country information used for origin and currency suggestions; Flyroz stores only the returned country code in sessionStorage)
• Browser session data (your chosen departure airport, detected country code, and last-minute-card dismissal preference, stored in sessionStorage for the tab session)
• Standard server logs (access logs generated automatically by our hosting provider, Vercel — these may include IP addresses, browser details, requested paths, and timestamps, and are retained under the active Vercel configuration and policy)

We do not collect names, email addresses, or payment information, and we do not run advertising trackers.

Third-party services

When you choose a partner search, you are redirected to Aviasales (aviasales.com) or Kiwi.com (kiwi.com) through a Travelpayouts affiliate link. The selected partner's own privacy policy governs how it handles your data after you leave Flyroz. We recommend reviewing it before completing a booking.

We use the Travelpayouts/Aviasales affiliate API to retrieve indicative flight prices. This API call is made server-side (your browser contacts our own proxy, not Aviasales directly) and does not expose your personal data to a booking partner until you choose to click through. The outbound link contains the route and dates you entered. Aviasales also receives the traveler counts and supported cabin choice in its search URL.

Our site is hosted on Vercel. Vercel's infrastructure processes requests and may retain server logs in accordance with the active service configuration and Vercel's privacy policy. These infrastructure logs are separate from the values Flyroz stores in your browser's sessionStorage.

Vercel Web Analytics is optional and disabled unless the deployment is explicitly built with analytics enabled. When enabled, it helps us understand aggregate site usage and may receive limited, allowlisted product events such as a submitted search, a route-page view, or a selected booking provider. Flyroz removes query strings from analytics page URLs and blocks unapproved event properties. The approved events do not include names, email addresses, payment details, provider URLs, IP-address fields, or full travel dates.

We use the Pinterest API to publish content (Pins) to Pinterest from our own Flyroz Pinterest account, as part of our content distribution. Flyroz is not endorsed by, affiliated with, or sponsored by Pinterest. We do not collect, store, sell, resell, or redistribute Pinterest user data or Pinterest content to any third party. If our Pinterest integration is ever disconnected, any stored Pinterest access or refresh tokens are deleted immediately.

Cookies

We use browser sessionStorage for functional preferences. The Flyroz application does not currently create advertising cookies or use advertising pixels. Optional infrastructure, analytics, and booking partners process data under their own configurations and policies. See our Cookies page for full details.

Your rights

If you are in the UK, EU, or EEA, you have rights under GDPR including the right to access, correct, or delete personal data where those rights apply. Flyroz does not maintain user accounts or customer profiles, but infrastructure providers may process request records. For any privacy enquiries, contact us at support@flyroz.com.

Changes to this policy

We will update the "Last updated" date above if this policy changes materially. Continued use of the site after changes constitutes acceptance of the updated policy.