Skip to content
FlightFlow Home

Cookie Policy

Effective date: May 16, 2026 · EU ePrivacy and TCF v2.3

The short version: we do not use tracking cookies on this site. No advertising cookies. No cross-site trackers. No analytics that require consent under GDPR or the EU ePrivacy Directive.

What cookies are

Cookies are small text files a website can store in your browser. They can be "strictly necessary" (required for the site to function) or "non-essential" (analytics, advertising, personalization). EU law requires explicit consent for non-essential cookies before they are set. We chose not to set non-essential cookies at all, so no banner is shown.

Cookies we use on flightapp.co

  • No non-essential cookies. The marketing pages (this site, including /, /pricing, and so on) are statically generated. They use small first-party scripts for theme switching and page transitions, but those scripts do not set tracking cookies.
  • Cloudflare may set a strictly necessary __cf_bm cookie for bot mitigation. This is an essential security cookie and does not identify you.

Cookies on /track/{token}

The share-recipient page (/track/{token}) is server-rendered on demand and explicitly sets no tracking cookies on the recipient device. If a recipient submits a landing-notification request, the request is stored server-side against the share token. No Web Push cookie, marketing analytics, or advertising cookies fire on this page.

Cookies inside the iOS and Android apps

The native apps use Firebase Auth and Firestore SDKs which store identifiers in the app's own sandboxed storage (not browser cookies). See our Privacy Policy for the full list of stored identifiers and processors.

Your rights

Because we set no non-essential cookies, no consent withdrawal is needed for them. For data we do collect (account, flight history), your full GDPR and CCPA rights are documented at /privacy. To request export or deletion, see /data-deletion.

Browser-level controls

You can clear or block cookies in your browser settings at any time. Doing so will not affect any feature of flightapp.co. Global Privacy Control (GPC) signals are honored as a "Do Not Sell or Share" opt-out under CCPA. Since we do not sell or share personal information, this is redundant.

Changes to this policy

If we ever add non-essential cookies (we do not intend to), we will publish a 30-day notice in the changelog and present a consent consent banner before any non-essential cookie is set.

Contact

Privacy questions: privacy@flightapp.co.

Privacy · Terms · Delete account
© 2026 FlightFlow · Not affiliated with any airline.