Privacy Policy

Information used for flight searches

When you search, we receive the information needed to find and compare flights: airports or cities, dates, passenger counts, cabin, currency, flexibility and travel preferences. Preferences may include stops, airlines, baggage, nearby airports, price limits and seat requirements. Autocomplete sends lookup text to our API.

We use this information to return results, compare alternatives and recheck selected fares. We also process search and itinerary identifiers, flight details, prices, provider tokens and seller links.

Our backend supports storing search results, search activity, booking-link clicks and operational measurements. These help us reuse results, diagnose problems, measure provider usage and improve route information. Clicking a booking link does not tell us that you completed a purchase.

Technical information and analytics

Online requests expose your IP address, browser or app information, requested address and request headers to our hosting infrastructure. Our API uses IP addresses for rate limiting. The Android app identifies its requests with a shared "WayzunoApp" marker; this is not an individual device identifier.

The website includes Vercel Web Analytics for page views and interaction events, such as searches, result counts, cabin choices and sharing actions. Error reporting includes classified JavaScript errors and server diagnostics. Some server errors may include additional technical context.

The analytics loader respects supported Do Not Track and Global Privacy Control signals. These controls do not disable server-side search records or operational logging.

We use Vercel Web Analytics, which does not use cookies. We do not use Google Analytics or advertising trackers.

Information kept on your device

Local storage remembers recent searches, saved trip shortlists, route watchlists, local price targets, display settings and manually entered loyalty-point balances. Session storage holds temporary navigation and attribution information.

Saving these items does not itself upload them. Reopening a saved search and searching again sends the relevant criteria to our API. Existing trip shortlists can contain historical itinerary and price snapshots; these are not current fare checks.

Saved plans and preferences (home airport, preferred cabin and display options) are stored only on your device and are never sent to us as a list.

There is no Wayzuno account or cloud-sync flow.

Fly Together and sharing

Optional names and passport-country choices support traveler labels and entry-rule checks.

Passport country is used only when you select it; we never infer it from departure airports. Fly Together share links contain airport codes, dates, cabin and flexibility, and exclude names, passport countries and votes.

Older links containing personal fields are cleaned when opened. Their original addresses may already have reached hosting systems or been saved by recipients.

Sharing, copying links or exporting calendar files passes information to your chosen apps or recipients. Other trip-sharing tools may include itinerary details and user-entered titles or notes. Review shared content before sending it.

Third parties

Relevant information goes to:

• Vercel: website and API hosting, analytics and operational infrastructure.
• SearchAPI.io: flight-search criteria and selected-flight tokens for fares and booking resolution.
• Neon: our database, hosted on Amazon Web Services in the United States (Ohio), which stores search, cache, event and route records.
• Airlines and travel agencies: selected itinerary information and booking tokens when you continue to their sites. They receive network information and handle information you enter there under their own policies.
• External resource services: Google Fonts and airline-logo hosting, unpkg/MapLibre, OpenFreeMap and image hosts receive requests when those resources load. Map requests can reveal the area viewed.

We do not sell your personal information or use it for advertising. Our service providers process it on our behalf. Our servers are in the United States, so information you send us is processed there.

Retention, security and cookies

Default server validity is 15 minutes for flight selections and 30 minutes for search snapshots. Expiry does not guarantee immediate deletion. Provider-cache lifetimes vary. Some device route caches use 24-hour freshness filtering.

We keep server-side search records and logs for up to 90 days, then delete or anonymize them. Database restore points roll off after 6 hours. Analytics data is kept by Vercel under its own retention settings.

The website, API and flight-provider connections use HTTPS, and our database connections are encrypted with TLS.

Wayzuno does not set its own cookies; our scripts use your browser's local and session storage. If you have Android device backup turned on, Android may include the app's local data in that backup.

Your choices, children and contact

Use available clear/delete controls, clear website storage, or clear the Android app's data to remove local items. Uninstalling ordinarily removes app-local data; backups or previously shared copies may remain. These actions do not delete server records.

To access or delete the information we hold about you, email info@wayzuno.com. We respond within 30 days. Depending on where you live, you may have additional rights under local law, including the right to complain to your data protection authority. This policy is governed by the laws of the State of New York, USA.

Wayzuno is intended for adults 18 and over and is not directed at children. Searches can include child and infant counts but never their names or birth dates. If you believe a child has given us personal information, email us and we will delete it. We found no collection of contacts, precise GPS location, microphone, camera, passport numbers, payment cards or account passwords.