Privacy policy
Last updated: October 24, 2026
Public flight search and abuse prevention
You can search this website without Telegram or an account. Search routes, dates and filters are sent to our flight-data provider. Booking takes place on partner websites.
Cloudflare processes your IP address to deliver and protect this website. We use a daily rotating keyed hash of the IP address for request limits (30 searches per UTC hour and 100 per UTC day). We do not store raw IP addresses in the application’s rate-limit records. Pseudonymous counters are deleted within 48 hours of their last use.
Before the first search, Cloudflare Turnstile verifies the browser. It processes browser and network signals under Cloudflare’s privacy policy: www.cloudflare.com/privacypolicy/. After successful verification, a necessary HttpOnly, Secure session cookie (__Host-wf_session) lasts up to one hour. It contains a signed random identifier, expiry and IP pseudonym; it is not used for advertising or analytics. You may need to verify again after your network changes or at the daily pseudonym rotation.
Your browser may remember language, currency and departure airport locally. Price alerts are optional and handled by the Telegram bot. No AI model is called by public web search or the curated trip guide.
The Telegram bot
When you use the bot we store your Telegram chat id, language, currency, home airport, search filters and recent searches. These are deleted after 180 days without use.
If you create price alerts, we store them until they end or you delete them.
If you send feedback, it reaches the bot owner together with your first name and chat id.
Who receives data
To find prices, the route and dates you search (not who you are) are sent to our flight-data provider, Travelpayouts.
Booking and partner links open the partner’s website; what you do there is covered by that partner’s privacy policy.
We do not sell or rent personal data, and we do not share it for advertising.
Your choices
Send /privacy to the bot to see this summary, or /forget to delete everything the bot stores about you at once.
You can stop using the bot at any time; unused data expires automatically as described above.
Contact
Questions about privacy: see the contact page.