The short version
We collect the minimum needed to send you the flight deals you signed up for. We don't sell your data, we don't share it with ad networks, and we don't store anything you didn't give us on purpose. You can export or delete your account anytime from /preferences (or email us).
What we collect
- Account: email, optional first name, password (hashed with bcrypt; we never see the plaintext).
- Preferences: the airports, airlines, destinations, trip shape, and vibe you provided during onboarding.
- Engagement: when you click a deal, we record the click against your account so we can attribute commission and improve future picks. We don't store the raw IP — only a salted daily hash.
- Email events: opens and clicks reported by our email provider (Resend), used to measure deliverability and tune your digest.
What we don't collect
- Plaintext IP addresses (we hash them with a daily-rotating salt).
- Payment information — we're not on Stripe yet.
- Browsing history outside Fareduck.
- Anything from third-party trackers — we don't embed any.
How we use it
- Generate your weekly digest of flight deals.
- Rank deals using a travel persona we infer from your vibe (you can edit or delete this at /preferences/persona).
- Send transactional emails (verify, reset, weekly digest).
- Measure aggregate product health (no individual tracking).
Who we share it with
Service providers only, and only what they need to do their job:
- Neon hosts our database.
- Vercel runs our app.
- Resend delivers your email.
- Google (Gemini) processes your vibe text to generate your travel persona. We send the text, get a structured summary back. Google retains data per their API terms.
- Duffel returns flight inventory; we don't send your identity, only an anonymous query.
- Affiliate networks (when active): when you click a partner link, we pass an anonymous subid so they can attribute the click back to us for commission. No personal info crosses over.
- Sentry for error reporting. We scrub identifiers from stack traces.
Affiliate disclosure
Fareduck may earn a commission when you book through a partner link. This never influences how we rank deals — our ranking layer is architecturally walled off from the monetization layer (we mean this; you can read the code). Sponsored content (when we ship it) is always labelled clearly.
Your rights
- Access — email us at hello@mail.fareduck.io and we'll send you everything we have on you.
- Delete — email the same address with subject "delete my account" and we delete within 7 days.
- Unsubscribe — every email has a one-click unsubscribe link; you can also pause for 30 days or hard-unsub from /preferences.
Children
Fareduck isn't for users under 13. We don't knowingly collect data from anyone under 13; if you believe we have, email us and we'll remove it.
Changes
We'll update this page when our practices change, and email active users about material changes. Continued use after a change means you accept it.
Contact
Questions, requests, or concerns: hello@mail.fareduck.io. We try to reply within 2 business days.