Website privacy

This notice covers the website catchflights.net. The CatchFlights apps and their backend are covered by the separate app privacy policy.

Controller

No cookies, no tracking

This website sets no cookies and uses no analytics or advertising tools. Fonts, images and scripts are all served from catchflights.net itself; nothing is loaded from another website.

Server logs

When you open a page, your browser sends technical data that the web server needs to deliver it: your IP address, the date and time, the page requested, the referring page and your browser's user agent. The server records these in its log to operate the website and keep it secure. Legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). The log is not combined with other data, not used for analytics, and kept only as long as operation and security require.

The pages are served by our own server at Hetzner Online GmbH, Gunzenhausen, Germany.

Cloudflare

Every request to catchflights.net passes through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which acts as a content delivery network and reverse proxy. Cloudflare processes the same request data as our server, including your IP address, to deliver the pages quickly and to protect the website against attacks. Cloudflare may also ask your browser to report failed connections to it (Network Error Logging), and it replaces email addresses on the pages with a small script, served from catchflights.net, that protects them from spam harvesters. Cloudflare may process data in the USA; it is certified under the EU–US Data Privacy Framework. Legal basis is our legitimate interest in a fast, secure website (Art. 6(1)(f) GDPR). Details are inCloudflare's privacy policy.

Links to other services

The support form and the app privacy policy are served by the CatchFlights backend; the app stores are run by Apple and Google. Their own privacy terms apply when you follow those links.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. You may also lodge a complaint with a supervisory authority, for example the State Commissioner for Data Protection of Lower Saxony.