Privacy policy

The controller of personal data processed through Flight Alerts (flight-alerts.com) is Saccas Srl, Italian VAT number 02250740566. For privacy enquiries or to exercise your rights, contact info@flight-alerts.com.

This notice explains the processing of personal data under Regulation (EU) 2016/679 (GDPR). It applies to Flight Alerts, not to external websites or services, which have their own privacy notices.

Account and preferences: email address, account identifier, display name when provided, authentication data, language, time zone, registration and sign-in information.

Watches: labels and coordinates of the places you save, radius, aircraft or airline filters, altitude and notice time, together with relevant aircraft passes and notification history. A saved place may identify your home or another location associated with you.

Notification channels: email address, Telegram chat identifier if linked, and browser push subscription endpoints and keys if enabled.

Subscriptions and invoicing: plan, trial and subscription status, payment references and history; company name, VAT number and invoicing details if you request a business invoice. Card details are entered with Stripe, not stored by Flight Alerts.

Technical and support data: IP addresses, browser and device information, access and error logs needed for operation and security, and the information you send when contacting us.

Providing the service: creating and managing your account, activating the free trial, saving watches, checking aircraft passes, sending requested notifications and service emails, and managing subscriptions and assistance. The legal basis is performance of a contract or steps at your request before entering a contract (Article 6(1)(b) GDPR).

Accounting and legal obligations: managing required invoices, tax records and lawful requests from authorities, based on compliance with a legal obligation (Article 6(1)(c) GDPR).

Security and administration: preventing abuse, enforcing the one-time trial, diagnosing faults, protecting legal rights and informing authorised administrators about registrations, subscriptions, failed payments and cancellations. The basis is the controller’s legitimate interest in operating and protecting the service (Article 6(1)(f) GDPR), balanced against users’ rights.

Location access and push notifications are optional and require the permissions offered by your device or browser. These permissions can be withdrawn at any time. Where a processing activity relies on consent, withdrawal does not affect the lawfulness of processing before withdrawal.

You can enter a place manually or search for it by name. When you request your current location, the browser asks for permission; Flight Alerts does not require continuous background tracking of your device. Coordinates saved in a watch are used to check nearby aircraft.

Place searches are sent to the Nominatim/OpenStreetMap geocoding service. Aircraft data providers receive the geographical area needed for a traffic query, rather than your account credentials. Avoid entering unnecessary personal information in searches or place labels.

Authorised personnel and technical providers may access the data necessary for their tasks, including hosting, account management, storage, service email delivery and technical diagnostics through Lovable Cloud. Where required, providers act as processors under appropriate agreements.

Stripe processes subscription payments and billing information. Telegram processes messages when you connect your chat and operational notices sent to authorised administrators; such notices may contain the registering user’s email and account or payment status. Browser push providers process the delivery information and notification content needed to reach your device.

Meta Platforms Ireland Ltd receives, through the Meta Pixel and the Conversions API, page visits, free-trial signups and purchases (plan and amount), technical data (IP address, browser, Meta cookies), a pseudonymous account identifier and — only if you clicked "Accept" on the cookie banner — your email in hashed form, to measure and optimise our Facebook/Instagram ads. In the EEA, UK and Switzerland this happens only with your consent (Article 6(1)(a) GDPR), which you can withdraw anytime from the Cookie Policy page.

Google Ireland Ltd receives, through the Google Ads tag, page visits, free-trial signups and purchases (plan and amount), together with technical data (IP address, browser, Google cookies), to measure and optimise our Google ads. In the EEA, UK and Switzerland this happens only with your consent (Article 6(1)(a) GDPR), which you can withdraw anytime from the Cookie Policy page.

Google Ireland Ltd also receives visits and interactions through Google Analytics 4, with technical data (IP address, browser, device and analytics cookies), to analyse use of the site. Analytics consent is separate from advertising consent. In the EEA, UK, Switzerland and unknown regions it stays disabled until you accept analytics. You can withdraw through Cookie Policy; choices, timestamps and notice versions are stored on your device. Advertising signals and advertising personalisation are disabled for Analytics.

Data may also be disclosed to professional advisers or competent authorities when necessary to meet legal obligations or protect rights. We do not sell personal data to advertising networks.

Data is processed electronically with access controls and technical and organisational safeguards intended to prevent unauthorised access, disclosure, alteration or loss. No online system can guarantee absolute security.

Processing takes place at the controller and its providers. Some external services may process data outside the European Economic Area. Where required by the GDPR, transfers must rely on an adequacy decision or appropriate safeguards, such as standard contractual clauses. You can request information about the providers, processing locations and applicable safeguards using the privacy contact address.

Account data, watches and notification preferences are retained for as long as needed to provide and manage the service. Notification history and technical records are retained only for the period necessary for operation, assistance, security and the resolution of disputes, taking into account the type of record and applicable obligations.

After account closure, data no longer needed is deleted or anonymised, subject to legal obligations and the protection of rights. Accounting and tax documents are retained for the statutory periods. Any limited records retained to prevent repeat trial abuse must be proportionate to that purpose. You can ask for the retention criteria applicable to your data.

Account data and at least one saved monitoring location are needed to provide watches. Payment details are required only if you subscribe to a paid plan: the 7-day free trial does not require a card. If essential data is not provided, the corresponding service cannot be delivered.

Your display name, Telegram connection, browser push permission and access to your current location are optional. You can instead enter coordinates manually and choose which available notification channels to use.

Within the conditions and limits set by the GDPR, you may request access to your data, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw any consent you have given.

Send requests to info@flight-alerts.com. We may ask for information necessary to verify your identity. Requests are normally answered within one month, with any extension communicated as required by law. You may lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali) or the authority in your country of residence, work or the alleged infringement.

Aircraft matching and notifications are automated using the locations and filters you choose. Plan limits and trial eligibility are also managed automatically. The service does not use these operations to make solely automated decisions producing legal or similarly significant effects under Article 22 GDPR, or for advertising profiling.

Flight Alerts uses technical cookies and device storage for sign-in, language preferences and notification functionality. For details and your choices, see the Cookie Policy linked below.

This notice may be updated when the service or applicable rules change. The current version is available on this page with its revision date. Significant changes will be communicated where required; any new processing that requires consent will not be introduced merely by updating this notice.