Account administration
Authorized FliteMaster staff may view account details and credit history to provide the service. Purchase information and support tools are restricted to assigned permissions. We record registration, email verification, recent authenticated activity, and administrative changes, including the staff member and reason for each credit award. These records support account security and billing accountability.
Information we use
For FliteMaster registration we store your email, display name, a salted password hash, hashed recovery and session tokens, and account security events. We do not store readable passwords. Existing customers can connect their earlier hosting-platform sign-in to the same customer record. We also store your home airport, radius preference, email preferences, search itineraries, saved results, wallet activity, purchase identifiers and support requests. The airport planner uses the coordinates of your selected home airport and does not request a street address or device location. Historical searches created before this change may retain their original geographic center.
Verification and abuse prevention
Email verification codes are hashed and expire. Email identifiers are normalized and hashed to limit duplicate promotional claims. Security checks use Cloudflare Turnstile; the service can receive the request IP for verification. Request counters and provider error records help protect the service from abuse and unexpected spending.
Service providers
Our hosting platform stores FliteMaster account records and processes application requests. Secure cookies keep you signed in to FliteMaster. The earlier platform sign-in remains available for customers connecting an existing account. Stripe processes payments and receipts. When configured, an email delivery provider sends requested verification messages and authorized service messages. Approved flight-data providers receive itinerary parameters required for the search. The current airport savings calculator runs locally without a mapping-provider request. The former address and routing preview is disabled. Historical routing-cache entries expire after their original retention window and may remain until cleanup. Opening external driving directions sends the two airport locations to that mapping site, whose privacy policy applies.
Payment information
Full card numbers are entered on Stripe and are not stored by FliteMaster. We store Stripe customer, checkout, payment and refund identifiers, payment status, receipt links and the credit accounting necessary to support your purchases.
Booking links and affiliates
Opening a booking provider’s link takes you to that provider, which applies its own privacy policy. We may record the selected booking partner, product category, time, whether the link is an affiliate referral, and an associated search identifier. We do not append your account identity or email to referral URLs. The booking site may use its own cookies to attribute purchases. Approved affiliate tracking and confirmed commissions, when available, are disclosed separately. No active partnership is implied by a general booking-site link.
Trip planning and shared shortlists
Editable cost rates and destination-transfer preferences are stored in your browser. Airport-specific mileage overrides are held in page memory; a default home airport is stored in your account only when you save it. If you create a shared shortlist, the selected historical itineraries and aggregate cost estimates are stored in a link-accessible snapshot for seven days. The snapshot excludes your account identity, wallet, precise search-center location and provider booking tokens. Anyone with the link who can access the site can view it. You can revoke access under Trip activity; copies already downloaded cannot be recalled. Price-alert itineraries, limits, checks and in-app target notifications are stored in your account.
Retention and deletion
Account and search data are retained to provide saved history and support. Request deletion from Account settings or Support. We review unused credits and retain financial, dispute, fraud-prevention and legal records only as needed for those purposes. Administrative ledger and audit records are protected against alteration.
Your choices
You can edit your display name, home airport, radius and optional email preference in Account. You can change your FliteMaster password and sign out devices under Account settings. Recovery codes and approved email reset links expire or are replaced after use; account email corrections can be requested through Support. The airport calculator does not ask for location permission. Search prices are shown in USD at launch.
Contact
Use the authenticated Support page for privacy, deletion, access or correction requests. The business support address, when configured, is also shown on the contact page.