Privacy Policy

Effective date: 26 September 2026 · Version 1.8 · Privacy contact: [email protected]

FeiFinder ("we", "the extension") is a browser extension that helps users find award-flight seat availability. It works by passively capturing availability results from your own searches on the airline booking website the extension operates on (see the host permissions in the extension listing), pooling that availability data (stored against a random installation ID, never your contact details), and using the pool to send the route alerts that users choose to subscribe to. This policy explains exactly what data we handle. FeiFinder is an independent project and is not affiliated with, endorsed by, or connected to any airline.

1. Data we collect

Data	When	Why
Anonymous installation ID — a random identifier (UUID) generated on install; contains nothing about you by itself — if you connect an email address, our database links the two	Always	Attributes your contributions and shows your own search history and credits
Flight availability data — route, dates, per-cabin seat counts, miles and tax / cash amounts (adult and child), flight numbers and per-segment details (including the marketing airline of each segment, e.g. CX or a partner such as JL), passenger count, the source URL on the booking site (the Cathay page or availability-request address, including its query parameters), and capture timestamps	When you search flights on the supported booking site (including the site's prefetched calendar availability)	Shows your own flight-search history and contributes to the shared availability pool used to generate the route alerts you choose to receive
Extension version number (for example 0.4.1) — stored only as a daily count per version; not linked to your installation ID or email	Each time you open the extension panel	Knowing which versions are still in use, for example before retiring an old one
Email address (double opt-in)	Only if you choose to connect email	Login verification, sending your alert digests, and — unless you turn it off — FeiFinder product news (our own features, updates and offers only; see section 5)
Telegram chat ID and username — not currently enabled	Only if you choose to connect Telegram. Telegram delivery is built but switched off; today all alerts go by email	Sending your alert digests via Telegram
Product-news preference — your on/off choice and a history of changes (time and where you changed it)	Only if you connect an email	Deciding whether to send product news, and showing what you chose
Notification preferences — timezone, delivery windows, subscriptions (routes / dates / cabins you follow)	When you subscribe	Delivering the alerts you asked for

2. Data we do not collect

No airline account credentials, passwords, or booking/payment details.
No names, phone numbers, addresses, or government IDs.
No general browsing history — the extension only runs on the booking website domains listed in its permissions, and only processes flight-availability data there (including the site's prefetched calendar availability).
Raw website responses are processed locally on your device; only the parsed availability fields listed above are uploaded.
Your Asia Miles balance is read from your own logged-in Cathay session only to show it in the panel and tell you whether a result is within your balance. It is stored only on your own device (browser local storage) and is never uploaded or transmitted to us or to anyone else.
A background photo you choose for a holiday-plan export image is processed only on your device and is never uploaded.

3. How data is used and shared

Availability data is the product: seat availability you capture is pooled and shared with other users only through the route alerts they subscribe to (flight, date, cabin, seats, miles). It is never publicly attributed to you or your contact details.
Contact details are never shown to other users, never sold, and never shared for anyone else's advertising. We use your email for FeiFinder's own product news only as described in section 5, and you can turn that off at any time.
We use these service providers to operate FeiFinder: Supabase (database hosting), Brevo (email delivery), Telegram Bot API (Telegram delivery), Cloudflare (web hosting). Each receives only what is needed to provide its function.
We do not sell user data, do not use it for creditworthiness or lending purposes, and do not transfer it except as described here — consistent with the Chrome Web Store User Data Policy, including its Limited Use requirements.

4. Storage, security and retention

Data is stored in a managed database (Supabase) with row-level security; management credentials are stored only as salted HMAC hashes; transport is encrypted (TLS).
Availability data is retained while it is useful to the pool; personal channel data (email / Telegram), your product-news preference and its change history, and your subscription records, including cancelled ones, are kept until you ask us to delete them. Delivery records are cleared automatically by daily jobs: the content and error details of a finished digest after about 7 days and the record itself after about 30 days; older-format digest logs and email send logs after about 90 days.

5. Your choices and deletion

You can use FeiFinder without connecting an email address to view your own history. Email verification and approval are required to contribute to the shared pool, earn credits and subscribe to alerts.
You can stop alerts at any time: cancel individual subscriptions under “My Subscriptions” in the extension, or use the link included in every digest, which — after a confirmation page — cancels all active subscriptions of that email address (once a cancellation is completed, links in earlier digests stop working). Credits already spent are not refunded; the extension stays signed in and you can subscribe again later.
Product news. If you connect an email, we may send FeiFinder product news (new features, updates and our own offers). New users choose this when linking an email (the box starts ticked). For emails connected before this option existed, we show a notice in the extension first, with the start date, at least about a month before any product news is sent, unless you tell us you want it earlier. Turn it off any time: in the extension Settings, with the link in every product email (no login needed), or with the checkbox on the cancel-all page. Signing in or subscribing again does not turn it back on. This does not affect alert digests, login codes or access notices. Product emails already being sent when you turn it off may still arrive.
To delete your channel data or anything attributed to your installation ID, email [email protected] — we will action requests within 30 days. Availability facts already merged into the shared pool are stored against your random installation ID (never your contact details); if you ask us to delete the data attributed to your installation ID, we remove that link and keep the facts by default (a request covering only your email address removes the email channel but leaves the installation ID link in place); see section 3 of the Terms of Service, and tell us if you want those considered too.
Uninstalling the extension stops all collection immediately.

6. Changes

If this policy changes materially we will update this page and the effective date above. Questions, deletion requests and security reports: [email protected]. Alert digests are sent from [email protected]; that address is for outgoing mail only.

Summary: we collect flight-availability data from your own searches plus an optional email/Telegram contact for alerts (and, unless you turn it off, FeiFinder product news), and a daily count of which extension versions are in use — nothing else. Local processing, no credential access, no data sales, delete on request.