nojetlagPrivacy Policy
1. Data controller — The data controller of the personal data processed through this website is nojetlag.io. For any privacy-related question or to exercise your rights, please contact us at contact@nojetlag.io.
2. Scope of this policy — This Privacy Policy describes how we process personal data when you visit or use nojetlag.io (the "Service"), including the home page, the localized versions in English, French, and Spanish, the blog, the legal pages, and the affiliate redirect endpoint. It does not apply to third-party websites accessed through outbound links; those websites have their own privacy policies.
3. Data you actively provide — When you use the planner, you enter airport codes and, optionally, times. These inputs are used exclusively in your browser to compute the plan. They are not transmitted to our servers, not stored in any database, and not associated with any identifier. If you refresh the page or close the tab, the inputs are lost.
4. Data collected automatically — When you visit the Service, our hosting provider and our analytics tool may process technical data such as IP address (truncated for analytics purposes), user agent (browser type and version, operating system), preferred language, referrer URL, timestamp, page URL, approximate geolocation derived from the IP address (typically city-level), and interaction events (page views, clicks on tracked elements such as affiliate links). Server access logs are kept only for the time necessary to guarantee security and stability of the infrastructure and are automatically deleted afterwards.
5. Cookies and similar technologies — We use a small number of cookies and localStorage entries. Only one strictly necessary cookie (cc_consent) is set by default; it stores your cookie preferences. Analytics cookies (_ga, _ga_JF90T8WKY7) are set only after you give explicit consent through the cookie banner. Full details are provided in the Cookie policy.
6. Google Analytics 4 — We use Google Analytics 4 ("GA4"), a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) with parent Google LLC, to understand aggregate traffic and how visitors interact with the Service. GA4 sets cookies (_ga, _ga_JF90T8WKY7) and processes technical data (see paragraph 4) only after you accept analytics through the consent banner. Analytics data is transferred to Google servers located in the United States under the Standard Contractual Clauses adopted by the European Commission (Art. 46 GDPR) as implemented by Google. Data retention on GA4 is set to 13 months, renewed on each new visit; aggregated reports may be retained longer. We do not enable Google Signals, cross-device tracking, advertising features, or remarketing. We do not sell your personal data and we do not use advertising cookies. Google's privacy policy is available at policies.google.com/privacy.
7. Legal bases for processing — We rely on the following legal bases under Article 6 GDPR: (a) your consent (Art. 6(1)(a) GDPR) for analytics cookies and any non-essential processing linked to them; you can withdraw your consent at any time without affecting the lawfulness of the processing carried out before withdrawal; (b) our legitimate interest (Art. 6(1)(f) GDPR) in ensuring the security and stability of the Service, preventing abuse, storing your cookie preferences, and processing outbound clicks on affiliate links for aggregated statistics; (c) compliance with legal obligations (Art. 6(1)(c) GDPR) when we are required by law to process specific data.
8. Retention periods — We retain data only for as long as necessary for the purposes described in this policy: cookie preference (cc_consent): up to 6 months; GA4 analytics: 13 months on Google servers, then automatic deletion of user-level data; server access logs: typically up to 30 days; email communication with you (contact@nojetlag.io): as long as necessary to handle your request and, thereafter, in accordance with applicable statutory retention requirements.
9. Recipients of your data — Your data may be accessed by: our hosting provider (for the sole purpose of running the infrastructure); Google Ireland Limited and, indirectly, Google LLC (as GA4 processor, only if you have given consent); the operators of nojetlag.io. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
10. International data transfers — Some of the recipients mentioned above (in particular Google LLC for GA4) are located outside the European Economic Area. Such transfers take place under appropriate safeguards, namely the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR) and any supplementary measures implemented by the recipient. You may request a copy of the safeguards by contacting contact@nojetlag.io.
11. Your rights — Under the GDPR and, where applicable, similar laws in your country of residence, you have the following rights: right of access (Art. 15), right to rectification (Art. 16), right to erasure / "right to be forgotten" (Art. 17), right to restriction of processing (Art. 18), right to data portability (Art. 20), right to object to processing based on our legitimate interest (Art. 21), right to withdraw consent at any time without affecting the lawfulness of prior processing (Art. 7), and the right not to be subject to a decision based solely on automated processing (Art. 22).
12. How to exercise your rights — You can exercise any of the rights above by writing to contact@nojetlag.io. We will respond without undue delay and, in any case, within one month of receipt of the request, subject to the extension provided by Art. 12(3) GDPR when the request is particularly complex or numerous.
13. Right to lodge a complaint — You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. In Italy the competent authority is the Garante per la protezione dei dati personali (garanteprivacy.it).
14. Children — The Service is not directed at children under 16 and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will take reasonable steps to delete it.
15. Security — We take reasonable technical and organizational measures to protect personal data, including HTTPS everywhere, minimization of collected data (in particular, no server-side storage of the flight parameters you enter), restricted access to any operational data, and dependency on reputable providers. No transmission over the Internet, however, can be guaranteed to be 100% secure.
16. Affiliate disclosure — Some outbound links on the Service are affiliate links (for example Amazon Associates and similar programs). When you click such a link and make a qualifying purchase, we may earn a commission at no additional cost to you. We do not share personally identifiable information with affiliate networks; only the click event itself, and, where relevant, an affiliate identifier attached to the outbound URL, are transmitted so that the network can attribute the referral. The commission does not influence our editorial recommendations.
17. Automated decision-making — We do not carry out any automated decision-making that produces legal effects concerning you or similarly significantly affects you. The plans generated by the Service are informational and are not used to profile you.
18. Changes to this policy — We may update this Privacy Policy from time to time to reflect changes in the Service, our tools, or the applicable law. The current version is always available at this URL. Where changes are material, we will inform users through a reasonable channel, for example an update to the cookie banner or a notice on the home page.
19. Contact — For any question or request regarding this Privacy Policy, please contact us at contact@nojetlag.io.