Privacy · Updated 9 October 2026
Your itinerary stays in your browser.
Flight Rights is an EXLA project operated by Alexey. For questions or requests, contact hello@exla.dev.
The information you enter
Airport selections, date, optional flight number and cancellation answers are held in memory in your current browser tab. We do not send these form values to a server, put them in the address, store them in cookies or browser storage, or require an account. Reloading clears the check. Do not enter booking references, passenger names or documents.
The map and airport snapshot are served as static files. There is no flight-status API request containing your itinerary. Hosting still receives ordinary request information such as an IP address and requested URL to deliver the site and maintain security.
Usage measurement
Vercel Web Analytics measures visits and a small set of categorical events: check started, check completed with the result category, direct-help click and claim-service click. Event data does not include airports, travel dates, flight numbers, causes, booking information or free text. Query strings and fragments are removed from analytics URLs.
We honour browser Do Not Track and Global Privacy Control by suppressing analytics. Vercel describes its cookie-free analytics processing and retention in its policy linked below. We use these limited statistics to understand whether the tool is useful; our legal basis for these limited operational measurements is legitimate interest, subject to applicable local requirements.
Providers and your choices
Vercel hosts the site and analytics; Cloudflare provides DNS. The EXLA typography stylesheet may load fonts from Fontshare and Google Fonts, which receive the network request needed to deliver them. External airline and claim-service sites have their own privacy policies. We do not pre-fill their forms or transfer your answers to them.
If you email us, your message and address are used to answer it and handle relevant requests. We retain correspondence only as necessary for the request and legal obligations. You can ask about access, correction, deletion, objection and other applicable rights, or contact your local data-protection authority. Provider-specific retention and international transfer safeguards are described in the relevant provider policies.
Sources
Last reviewed 2026-10-09.