Who we are
Spontaneous.travel is a budget-first travel discovery tool that helps you find affordable flight destinations. The service is operated as a personal project. For privacy inquiries, contact us at privacy@spontaneous.travel.
What data we collect
We collect the minimum data needed to improve the service. Specifically:
- Search parameters — departure city, budget, trip duration, travel month, currency, number of travelers, accommodation type, and the number of results returned.
- Click events — when you click an affiliate link, we log the origin city, destination city, flight price, and the affiliate partner name.
- Country code — a two-letter country code (e.g., "FR", "US") derived from your connection by our hosting provider (Vercel). This is the most granular location data we store.
What we do NOT collect
- No IP addresses
- No browser fingerprints or user agents
- No names, email addresses (unless you explicitly subscribe), or account information
- No tracking cookies, advertising pixels, or third-party analytics (no Google Analytics, no Facebook Pixel)
- No cross-site tracking of any kind
Why we collect this data
- Product improvement — understanding which cities and budgets are most searched helps us prioritize features and data coverage.
- Affiliate attribution — click logs help us verify affiliate commission accuracy with our partners.
- Service reliability — monitoring search volume and result counts helps us detect and fix issues.
How long we store data
Search and click logs are retained for a maximum of 12 months from the date of collection. After this period, records are permanently deleted. Email subscriptions (if you opt in) are retained until you unsubscribe or request deletion.
Third-party services
We use the following third-party services to operate Spontaneous.travel:
- Vercel (hosting & analytics) — serves the website, provides the country code from your connection, and collects basic web performance metrics (page load times, web vitals). Vercel's built-in analytics are privacy-friendly and do not use cookies. Vercel Privacy Policy
- Google Analytics (usage analytics, consent required) — if you accept cookies, we use Google Analytics to understand traffic patterns. IP anonymization is enabled. Google Privacy Policy
- Supabase (database) — stores anonymous search and click logs. Data is hosted in the EU. Supabase Privacy Policy
- Travelpayouts / Aviasales (affiliate partner) — provides flight pricing data. When you click an affiliate link, you leave Spontaneous.travel and are subject to their privacy policy. Travelpayouts Privacy Policy
- Wikipedia / Wikimedia — destination images are loaded from Wikimedia Commons. Wikimedia Privacy Policy
Cookies & local storage
Spontaneous.travel uses cookies only with your explicit consent. When you first visit, a banner asks you to accept or reject non-essential cookies.
If you accept:
- Google Analytics cookies (
_ga, _gid) — used to understand how visitors use the site (pages visited, session duration, country). Google Analytics is configured with IP anonymization enabled. Data is processed by Google LLC. Google Privacy Policy
If you reject (or before you choose):
- No Google Analytics cookies are set
- No tracking scripts are loaded
- The site works identically — no features are restricted
Always active (functional):
- localStorage — stores your cookie consent choice and email subscription dismissal. This is not a cookie and is not sent to any server.
- Travelpayouts verification script — required for affiliate partnership. May set a cookie for attribution purposes.
You can change your consent choice at any time by clearing your browser's localStorage for this site, which will re-show the consent banner on your next visit.
Your rights (GDPR & ePrivacy)
If you are in the European Economic Area (EEA), you have the right to:
- Access — request a copy of any data associated with you.
- Deletion — request that we delete any data associated with you.
- Rectification — request correction of inaccurate data.
- Portability — receive your data in a structured, machine-readable format.
- Complaint — lodge a complaint with your local Data Protection Authority.
Since we do not collect personal identifiers, we may not be able to link stored data to you specifically. If you have questions, email privacy@spontaneous.travel.
Email subscriptions
If you choose to subscribe to deal alerts, we store your email address, preferred origin city, and currency. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting privacy@spontaneous.travel.
Children's privacy
Spontaneous.travel is not directed at children under 16. We do not knowingly collect data from children.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.