Privacy policy

Who we are

FareNotify decides how your personal data is used. For any privacy question or request, write to [email protected].

What we collect

• Your email address, to sign you in and send alerts. It is the only thing you must give us; everything else is optional.
• Your watchlists, preferences and notification settings, optional profile details, and anything you send through the feedback form.
• Your country, from your network connection, to show relevant deals. We do not store your IP address for that.
• A hashed form of your IP address and your browser type, in security logs that protect the service against abuse.
• Whether each email was delivered, and a record of each booking-link click (route, price shown, device type).
• If you allow Analytics: the pages you view, where you came from, and your language, device, browser and country.

Why we use it

• To provide the service (account, watchlists, sign-in, alerts). Basis: our contract with you, which is our terms.
• To keep it secure, check that emails are delivered, and count booking-link clicks that help fund the service. Basis: our legitimate interests in a secure, working, funded service, balanced against your rights.
• Analytics and advertising cookies. Basis: your consent.

We do not sell your data or show third-party advertising on FareNotify.

Cookies and similar technologies

You choose which optional cookies to allow the first time you visit, and can change or withdraw that at any time with "Cookie preferences" at the bottom of every page. Nothing optional runs until you allow it.

• Necessary - always on: sign-in, security, and remembering your choices and settings.
• Analytics - only if you allow it: our own visit counting, Google Analytics and Microsoft Clarity (recordings and heatmaps that mask what you type and skip sign-in, account, feedback and unsubscribe pages). Without Analytics, none of these run.
• Advertising - only if you allow it: Meta Pixel and Google Ads, to measure whether an ad led to a signup and to personalize advertising. Google's ad measurement runs through Google Analytics, so it also needs Analytics to be on.

Our own cookies last up to 12 months. The companies above set their own.

Who receives your data

Service providers that host the site, deliver our email and protect it against abuse process data for us. Google, Microsoft and Meta receive data only if you allow Analytics or Advertising. Booking sites receive you when you click through.

Google, Microsoft and Meta are based in the United States, so data you allow them to receive may be transferred there. They participate in the EU-US Data Privacy Framework, the basis of the European Commission's adequacy decision for participating US companies. Contact us for more information.

How long we keep data

• Account and watchlists: until you ask us to close your account. Backups are overwritten on a short rotation.
• Email delivery logs: about two weeks.
• Booking-click records, earlier email-open records and, if you allowed it, visit records: for as long as they remain useful for measuring how the service performs.
• Security logs: for as long as needed to keep the service secure.
• Your cookie choice: up to 12 months.

Your rights and choices

Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to its use, and to receive a portable copy. You can withdraw cookie consent with "Cookie preferences", unsubscribe from emails, and pause or delete any watchlist yourself. To use a right or close your account, write to [email protected]. You can also complain to your local data protection authority.