Privacy

1.The essentials, in five lines

• No sign-up, no passwords, no profile: we don’t ask for your name, phone or email to search flights.
• We don’t process payments and never see card details. That happens on the airline’s or agency’s site.
• We don’t sell, rent or share data with third parties for advertising.
• We use analytics to learn which parts of the site help and which don’t, in aggregate.
• What we keep in your browser are your own preferences — language, currency, home airport — so we don’t ask twice.

2.What data we handle

Three kinds, and nothing else:

• What you search for: origin, destination, dates, passenger count and cabin. It’s needed to fetch fares and isn’t tied to your identity, because we don’t know it.
• Technical connection data: your IP address, browser and device type, language, and the page you arrived from. Our hosting provider uses the IP to serve the site and log errors, and we use it — without storing it — to infer your country and approximate city.
• Site usage: which pages are viewed, which searches complete and which fares get clicked, in aggregate and statistical form. It tells us whether a feature is used or in the way.

3.How we infer your city, and why

For the map to show prices from where you are, the site needs a departure city before you type anything. Our hosting provider passes us, alongside the request, the country and approximate coordinates associated with your IP; from that we pick the nearest major airport and the usual currency of that country.

That location is city-level, not street-level: we don’t know where you are, we know which airport makes sense to offer you. We don’t use the device’s GPS and never ask for location permission.

Those coordinates aren’t written to any database: they’re used during the request and discarded. If the result doesn’t suit you, change the departure city in the search and we’ll remember your choice in your browser.

4.Cookies and data stored in your browser

The site uses no advertising or profiling cookies. These are all of them, and what each does:

volar_lang

The language you chose, so we serve the site in it. Cookie, 1 year.

volar_cur

The currency you chose, so prices show in it. Cookie, 1 year.

volar_origin

Your departure city, so we don’t ask again on every search. Cookie, 1 year.

volar_skin

Visual variant of the site, when one is being trialled. Cookie, 1 year.

volar_timefmt

Whether you prefer 12- or 24-hour times. Local storage, until you clear browser data.

volar_intro_seen

That you’ve seen the welcome dialog, so it isn’t repeated. Session storage, cleared when the tab closes.

volar_maptip · volar_tour_seen

That you’ve seen the map’s hints. Local storage.

volar_res:…

Your last search results, kept in your own browser so going back is instant and costs no second query. Session storage.

_ga · _ga_…

Google Analytics: distinguishes visits and sessions anonymously for aggregate counting. Cookies, up to 2 years.

5.Analytics, and how to stay out

We use Google Analytics 4 for aggregate metrics (page views, completed searches, fare clicks) and Vercel Analytics, which uses no cookies. We don’t join that data to any identity and don’t use it for targeted advertising.

Today the site shows no consent banner and analytics cookies are set on arrival. We’d rather say so than leave it out. If you don’t want your visit counted: block third-party cookies in your browser, use Google’s official Analytics opt-out add-on, or browse privately and clear data on exit. The site works the same without them.

6.Who else receives data, and what for

Only the providers the site needs to work. None receives data to sell to you or to profile you:

• Travelpayouts — where the fares come from. It receives the route and dates you search, from our server, without your IP.
• Airlines and agencies — when you click a fare, your browser goes to their site, and from that point their privacy policy applies, not ours.
• CARTO — serves the map imagery. Loading the map means your browser requests tiles from it, so it sees your IP.
• Wikimedia Commons and Unsplash — host the city photographs we show; when an image loads, they see your IP.
• Google Analytics — aggregate analytics, as described above.
• Vercel — hosts the site. It processes every request and keeps temporary technical logs, including the IP, to serve pages and diagnose faults.

7.How long data is kept

We keep no user database, so there is no history of yours to retain. Searches are processed and not stored against a person; fare data is cached for a few hours per route, the same for everyone.

Hosting’s technical logs are kept as long as needed to operate and debug the service. Analytics is retained in aggregate per Google Analytics settings (up to 14 months).

8.Your rights

Depending on where you live, the law gives you rights of access, rectification, erasure, objection and portability over your personal data — among others the European GDPR, Brazil’s LGPD, and the data protection laws of Latin American countries.

In practice, since we hold no accounts or identifiers for you, we usually cannot link a piece of data to a specific person. Even so, if you believe we handle anything relating to you, write to the address below and we’ll look into it. Anything held in your browser you can delete yourself at any time from your browser settings.

9.International transfers

The site is served from infrastructure distributed across several countries, and some of our providers are in the United States and the European Union. That means the technical data of your connection may be processed outside your country of residence, under whichever legal transfer mechanisms apply to each provider.

10.Children

Volar is a flight price lookup tool, not directed specifically at children. We ask nobody for personal details, so we don’t knowingly collect them from children either.

11.Changes to this policy

If what the site does changes, this page changes with it: it’s a document written from technical reality, not a fixed text. The version in force is the one published here, with its date above.