Privacy Policy

This Privacy Policy describes how SafeRoutes.online ("we," "us," or "our") collects, uses, and protects information when you use our website at https://saferoutes.online(the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

• Usage Data: Pages visited, time spent on pages, click interactions, route searches performed (origin airport, destination airport, travel date), routes selected, booking links clicked, map interactions (country clicks, layer toggles, airport clicks, flight clicks)
• Device Data: Browser type and version, operating system, device type (desktop/mobile/tablet), screen resolution
• Network Data: Anonymized IP address (last octet is masked), approximate geographic location (country/city level only, derived from anonymized IP), referring website URL
• Cookies: Analytics cookies (Google Analytics) — only set after you provide explicit consent via our cookie banner

1.2 Information You Provide

The Service does not require account creation, registration, login, or any form submission. We do not collect your name, email address, phone number, payment information, or any other personally identifiable information (PII) directly.

When you use the Route Finder, you enter airport codes and travel dates. This information is processed in your browser and is not transmitted to our servers. Route searches are tracked as anonymized analytics events (e.g., "MAA → BER") only if you have accepted analytics cookies.

1.3 Information We Do NOT Collect

• Names, email addresses, or contact information
• Payment or financial information (bookings happen on Trip.com, not our site)
• Precise geolocation (GPS coordinates)
• Biometric data
• Social media profiles or login credentials
• Any data from minors under 16 years of age

2. How We Use Your Information

We use the collected information solely for the following purposes:

• Service Improvement: Understanding which features are used, which routes are most searched, and how users interact with the map to improve the Service
• Performance Monitoring: Identifying errors, loading issues, and optimizing page performance
• Traffic Analysis: Understanding visitor demographics (country-level), traffic sources, and usage patterns
• Content Relevance: Prioritizing conflict data and route coverage for regions that users search most

We do not use your information for:

• Advertising or ad targeting
• Selling or renting to third parties
• Profiling or automated decision-making
• Email marketing or unsolicited communications

3. Cookies and Tracking Technologies

3.1 Cookie Consent

We use a cookie consent banner that appears on your first visit. Analytics cookies are only set after you explicitly click "Accept Cookies."If you decline, no analytics cookies are placed and no tracking occurs. Your consent choice is stored in your browser's localStorage (not as a cookie) and can be changed at any time by clearing your browser data.

3.2 Google Analytics (GA4)

If you accept cookies, we use Google Analytics 4 (GA4) to collect usage data. Key privacy protections:

• IP Anonymization: Enabled by default — your full IP address is never stored by Google
• Data Retention: Set to 14 months, after which data is automatically deleted
• No Advertising Features: Google Signals, remarketing, and advertising reporting are disabled
• No User-ID Tracking: We do not use Google Analytics User-ID feature
• Data Processing Location: Google may process data in the United States and other countries where Google operates

Google Analytics cookies used: _ga (2 years), _ga_* (2 years). For more information, see Google's Privacy Policy and Google Analytics Opt-Out Browser Add-on.

3.3 Essential Storage (Not Cookies)

We use browser localStorage (not cookies) for:

• Cookie consent preference: Whether you accepted or declined analytics cookies
• No other localStorage data is stored

4. Third-Party Services

4.1 Data Sources

The Service aggregates publicly available data from the following sources. No user data is shared with these sources:

• US State Department — Travel advisory data via public API (cadataapi.state.gov)
• UK FCDO — Foreign travel advice via public API (gov.uk)
• GDELT Project — Global conflict event data via public API
• OpenSky Network — Live flight tracking data via public API
• OurAirports — Airport database (open data)
• OpenFlights — Airline route database (open data)
• OpenStreetMap / CARTO — Map tiles

4.2 Affiliate Links (Trip.com)

When you click a "Book" button, you are redirected to Trip.com, a third-party flight booking platform. We include affiliate tracking parameters in the URL. Trip.com has its own privacy policy and data practices that are independent of SafeRoutes.online. We do not receive any personal data from Trip.com about your bookings. We may receive anonymized commission reports (booking counts and revenue, without identifying individual users).

4.3 Hosting (Vercel)

The Service is hosted on Vercel Inc. Vercel may collect server access logs including IP addresses, request URLs, and timestamps. See Vercel's Privacy Policy.

5. Data Retention

• Google Analytics data: Retained for 14 months, then automatically deleted
• Server logs (Vercel): Retained per Vercel's data retention policy (typically 30 days)
• Cookie consent preference: Stored in your browser until you clear localStorage
• We do not maintain any user database, profiles, or persistent records of individual users

6. Your Rights (GDPR, CCPA, and Other Regulations)

Depending on your jurisdiction, you may have the following rights:

6.1 For EU/EEA/UK Residents (GDPR)

• Right to Access: Request a copy of the data we hold about you
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how your data is used
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw cookie consent at any time by clearing browser data
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Legal basis for processing: Consent (Article 6(1)(a) GDPR) for analytics cookies. Legitimate interest (Article 6(1)(f) GDPR) for essential service operation.

6.2 For California Residents (CCPA/CPRA)

• We do not sell your personal information
• We do not share your personal information for cross-context behavioral advertising
• You have the right to know what data is collected and request its deletion
• You have the right to opt out of analytics by declining cookies
• We do not discriminate against users who exercise their privacy rights

6.3 Exercising Your Rights

Since we do not collect personally identifiable information, most data rights requests can be fulfilled by:

• Opting out of analytics: Decline cookies via the banner, or clear your browser's localStorage and cookies
• Google Analytics opt-out: Install the Google Analytics Opt-Out Browser Add-on
• Data deletion request: Contact us (see Section 10) and we will delete any identifiable data associated with your request

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where Google and Vercel operate. These transfers are necessary for the operation of the Service and are conducted in compliance with applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) where required by GDPR.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS/TLS encryption for all data in transit
• No storage of personally identifiable information on our servers
• IP anonymization in Google Analytics
• Regular review of third-party service security practices
• Minimal data collection principle — we only collect what is necessary

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

9. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us and we will promptly delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about our data practices, please contact us at:

• Website: https://saferoutes.online
• Email: puspalatha@hodolist.com

For EU/EEA residents: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.