Privacy Policy

Effective date: 1 August 2026 · Version 1.1 · Privacy contact: [email protected]

FeiFinder ("we", "the extension") is a browser extension that helps users find award-flight seat availability. It works by passively capturing availability results from your own searches on the airline booking website the extension operates on (see the host permissions in the extension listing), pooling that anonymised availability data, and letting users browse it and subscribe to alerts. This policy explains exactly what data we handle. FeiFinder is an independent project and is not affiliated with, endorsed by, or connected to any airline.

1. Data we collect

Data	When	Why
Anonymous installation ID — a random identifier (UUID) generated on install; contains nothing about you	Always	Attributes your contributions and shows your own search history and credits
Flight availability data — route, dates, cabin seat counts, miles / cash price levels, flight numbers, capture timestamps	When you search flights on the supported booking site	The crowdsourced availability pool that powers the calendar and alerts
Email address (double opt-in)	Only if you choose to connect email	Login verification and sending your alert digests
Telegram chat ID and username — not currently enabled	Only if you choose to connect Telegram. Telegram delivery is built but switched off; today all alerts go by email	Sending your alert digests via Telegram
Notification preferences — timezone, delivery windows, subscriptions (routes / dates / cabins you follow)	When you subscribe	Delivering the alerts you asked for

2. Data we do not collect

No airline account credentials, passwords, or booking/payment details.
No names, phone numbers, addresses, or government IDs.
No general browsing history — the extension only runs on the booking website domains listed in its permissions and only processes flight-availability responses there.
Raw website responses are processed locally on your device; only the parsed availability fields listed above are uploaded.

3. How data is used and shared

Availability data is the product: seat availability you capture is pooled and shown to other users in aggregate (by route and date). It is never publicly attributed to you or your contact details.
Contact details are never shown to other users, never sold, and never used for advertising.
We use these service providers to operate FeiFinder: Supabase (database hosting), Resend (email delivery), Telegram Bot API (Telegram delivery), Cloudflare (web hosting). Each receives only what is needed to provide its function.
We do not sell user data, do not use it for creditworthiness or lending purposes, and do not transfer it except as described here — consistent with the Chrome Web Store User Data Policy, including its Limited Use requirements.

4. Storage, security and retention

Data is stored in a managed database (Supabase) with row-level security; management credentials are stored only as salted HMAC hashes; transport is encrypted (TLS).
Availability data is retained while it is useful to the pool; personal channel data (email / Telegram) is retained until you disconnect or ask us to delete it.

5. Your choices and deletion

You can use FeiFinder anonymously — connecting email or Telegram is optional and only needed for alerts.
You can unsubscribe from all delivery at any time (unsubscribe link in every digest, or the extension's account panel).
To delete your channel data or anything attributed to your installation ID, email [email protected] — we will action requests within 30 days. Anonymised availability facts already merged into the shared pool carry no link back to you and are retained by default; see section 3 of the Terms of Service, and tell us if you want those considered too.
Uninstalling the extension stops all collection immediately.

6. Changes

If this policy changes materially we will update this page and the effective date above. Questions, deletion requests and security reports: [email protected]. Alert digests are sent from [email protected]; that address is for outgoing mail only.

Summary: we collect flight-availability data from your own searches plus an optional email/Telegram contact for alerts — nothing else. Local processing, no credential access, no data sales, delete on request.