Privacy Policy

Last updated: February 23, 2026

Overview

SkySnags operates skysnags.com and related services. This Privacy Policy describes how we collect, use, and safeguard information about you when you use our service. We are committed to handling your data responsibly and transparently.

By creating an account or using SkySnags, you agree to the practices described in this policy.

Information We Collect

We collect the following categories of information:

Account and Identity Information

When you sign up, we collect your email address. If you register using a social login provider (Google, Microsoft, or Apple via Supabase Auth), we receive a basic profile including your name and email address as provided by that provider. We do not receive or store your social provider password.

Flight Preferences

To deliver relevant flight deal alerts, we store your departure airports, preferred cabin classes, destination preferences, route watches, and notification settings. This data is used solely to match you with deals and send personalized alerts.

Usage Analytics

We collect anonymized usage data such as pages visited, deal views, and feature interactions to improve the product. Analytics data is not sold or shared with advertisers.

Payment Data

Subscription payments are processed by Stripe. SkySnags never receives, stores, or has access to your full credit card number, CVV, or banking details. All payment information is entered directly into Stripe's secure, PCI-compliant payment form. We retain only a Stripe customer ID and subscription status to manage your account.

Email Delivery

Deal alerts, digests, and transactional emails (such as account confirmation and password reset) are sent via Amazon Web Services Simple Email Service (AWS SES). Your email address is shared with AWS SES solely for the purpose of delivering messages you have requested. AWS SES does not use your email address for any other purpose.

Third-Party Processors

We work with the following sub-processors to operate SkySnags:

  • Supabase

    Provides authentication (including OAuth via Google, Microsoft, and Apple) and database hosting. Your account credentials and profile data are stored on Supabase infrastructure hosted on AWS.

  • Stripe

    Processes subscription payments. Stripe is a PCI Service Provider Level 1 certified payment processor.

  • Amazon Web Services (AWS SES)

    Delivers transactional and marketing emails on our behalf.

We do not sell your personal data to any third party. We do not share your information with advertisers, data brokers, or any party not listed above.

Cookies and Tracking

SkySnags uses session cookies strictly for authentication purposes. These cookies are set by Supabase Auth to maintain your logged-in session across page visits.

We do not use advertising cookies, third-party tracking pixels, or behavioral ad targeting of any kind. We do not participate in cross-site tracking networks.

How We Use Your Information

We use the information we collect for the following purposes:

  • Creating and managing your account
  • Matching your preferences to flight deals and sending alerts
  • Processing subscription payments and managing billing
  • Sending transactional emails (confirmations, password resets)
  • Improving and debugging our service through anonymized analytics
  • Complying with applicable legal obligations

Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law (for example, billing records may be retained for up to 7 years for tax and legal compliance).

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete personal data.
  • Deletion: Request that we delete your account and associated personal data.
  • Portability: Request a machine-readable export of your data.
  • Objection: Object to certain types of processing, including direct marketing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Security

We use industry-standard security practices including encrypted connections (HTTPS/TLS), secure credential storage via Supabase Auth, and access controls to protect your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

SkySnags is not directed at children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of SkySnags after changes are posted constitutes your acceptance of the updated policy.

Contact

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at:

[email protected]