Privacy Policy

This Privacy Policy describes how SafeRoutes.online ("we," "us," or "our") collects, uses, and protects information when you use our website at https://saferoutes.online(the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

• Usage Data (only if you accept analytics cookies): Pages viewed, how far down a page you scroll, which sections of an article hold your attention, how long you stay on a page, clicks on links that lead off the site, route searches performed (origin airport, destination airport, travel date), routes selected, and booking links clicked
• Device Data: Browser type and version, operating system, device type (desktop/mobile/tablet), screen resolution
• Network Data: Anonymized IP address (last octet is masked), approximate geographic location (country/city level only, derived from anonymized IP), referring website URL
• Cookies: Analytics cookies (Google Analytics) — only set after you provide explicit consent via our cookie banner. Until you accept, the Google Analytics script is never downloaded and no cookie is set

1.2 Information You Provide

The Service does not require account creation, registration or login. We do not collect your name, phone number, payment information, or any other personally identifiable information (PII) directly. The only exception is optional route alerts: if you choose to sign up, we collect the email address you enter (see 1.4).

When you use the Route Finder, you enter airport codes and travel dates. This information is processed in your browser and is not transmitted to our servers. Route searches are tracked as anonymized analytics events (e.g., "MAA → BER") only if you have accepted analytics cookies.

1.3 Information We Do NOT Collect

• Names or contact information (other than an alert email address you choose to give us)
• Payment or financial information (bookings happen on our booking partners' sites, not ours)
• Precise geolocation (GPS coordinates)
• Biometric data
• Social media profiles or login credentials
• Any data from minors under 16 years of age

2. How We Use Your Information

We use the collected information solely for the following purposes:

• Service Improvement: Understanding which features are used, which routes are most searched, and how users interact with the map to improve the Service
• Performance Monitoring: Identifying errors, loading issues, and optimizing page performance
• Traffic Analysis: Understanding visitor demographics (country-level), traffic sources, and usage patterns
• Content Relevance: Prioritizing conflict data and route coverage for regions that users search most

We do not use your information for:

• Advertising or ad targeting
• Selling or renting to third parties
• Profiling or automated decision-making
• Email marketing or unsolicited communications

1.4 Route Alerts (optional)

If you sign up for route or airspace alerts, we store the email address you enter with our email delivery provider and use it only to send those alerts. Every alert has an unsubscribe link, and you can ask us to delete your address at any time by writing to puspalatha@hodolist.com. We never sell or share it.

3. Cookies and Tracking Technologies

3.1 Cookie Consent

Nothing loads until you agree.A consent banner appears on your first visit and asks whether you accept analytics cookies. Until you choose "Accept," no analytics script is downloaded, no cookie is set, and no data about your visit is sent to Google. If you choose "Reject," or simply ignore the banner, that remains true for your entire visit. SafeRoutes.online works identically either way — every map, route search, and booking link behaves the same.

Your consent choice is stored in your browser's localStorage (not as a cookie), together with the date you made it and a version number so we can ask again if this policy changes materially. You can change your mind at any time using the "Cookie settings" link in the footer of every page. Withdrawing consent deletes the Google Analytics cookies from your browser and stops any further collection immediately. Withdrawal does not affect the lawfulness of what was collected beforehand.

3.2 Google Analytics (GA4)

If you accept cookies, we use Google Analytics 4 (GA4) to collect usage data. Key privacy protections:

• IP Anonymization: Enabled by default — your full IP address is never stored by Google
• Data Retention: Set to 14 months, after which data is automatically deleted
• No Advertising Features: Google Signals, remarketing, and advertising reporting are disabled
• No User-ID Tracking: We do not use Google Analytics User-ID feature
• Data Processing Location: Google may process data in the United States and other countries where Google operates

Google Analytics cookies used: _ga (2 years) and _ga_* (2 years). They hold a randomly generated identifier. That identifier lets us recognise a returning browser, so someone who reads three pages is counted once rather than three times. We use this to improve the routes and articles we publish — not to profile individuals, and never for advertising. Advertising storage, ad personalisation, and ad user data remain switched off at all times, whatever you choose.

Who receives it:Google Ireland Limited, and its parent Google LLC in the United States, act as our analytics provider. Data may be transferred outside the EU; Google relies on the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework for those transfers.

Legal basis:your consent, under Article 6(1)(a) GDPR and § 25(1) TTDSG.

For more information, see Google's Privacy Policy and Google Analytics Opt-Out Browser Add-on.

3.3 Strictly Necessary Storage (Not Cookies)

We use browser localStorage (not cookies) for:

• Cookie consent preference: Whether you accepted or rejected analytics cookies, when you chose, and which version of this policy you saw
• No other localStorage data is stored

This entry is required to remember your own cookie choice. It stays on your device, is never shared with anyone, and does not require consent.

4. Third-Party Services

4.1 Data Sources

The Service aggregates publicly available data from the following sources. No user data is shared with these sources:

• US State Department — Travel advisory data via public API (cadataapi.state.gov)
• UK FCDO — Foreign travel advice via public API (gov.uk)
• GDELT Project — Global conflict event data via public API
• OpenSky Network — Live flight tracking data via public API
• OurAirports — Airport database (open data)
• OpenFlights — Airline route database (open data)
• OpenStreetMap / CARTO — Map tiles

4.2 Affiliate Links (Trip.com, Kiwi.com, Aviasales)

When you click a booking button, you are redirected to a third-party flight booking platform (Trip.com, Kiwi.com or Aviasales). We include affiliate tracking parameters in the URL. Each platform has its own privacy policy and data practices that are independent of SafeRoutes.online. We do not receive any personal data from them about your bookings. We may receive anonymized commission reports (booking counts and revenue, without identifying individual users).

4.3 Hosting (Vercel)

The Service is hosted on Vercel Inc. Vercel may collect server access logs including IP addresses, request URLs, and timestamps. See Vercel's Privacy Policy.

5. Data Retention

• Google Analytics data: Retained for 14 months, then automatically deleted
• Server logs (Vercel): Retained per Vercel's data retention policy (typically 30 days)
• Cookie consent preference: Stored in your browser until you clear localStorage
• We do not maintain any user database, profiles, or persistent records of individual users

6. Your Rights (GDPR, CCPA, and Other Regulations)

Depending on your jurisdiction, you may have the following rights:

6.1 For EU/EEA/UK Residents (GDPR)

• Right to Access: Request a copy of the data we hold about you
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how your data is used
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw cookie consent at any time via the "Cookie settings" link in the footer
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Legal basis for processing: Consent (Article 6(1)(a) GDPR) for analytics cookies. Legitimate interest (Article 6(1)(f) GDPR) for essential service operation.

6.2 For California Residents (CCPA/CPRA)

• We do not sell your personal information
• We do not share your personal information for cross-context behavioral advertising
• You have the right to know what data is collected and request its deletion
• You have the right to opt out of analytics by declining cookies
• We do not discriminate against users who exercise their privacy rights

6.3 Exercising Your Rights

Since we do not collect personally identifiable information, most data rights requests can be fulfilled by:

• Opting out of analytics: Reject cookies on the banner, or use the "Cookie settings" link in the footer at any time to withdraw consent — this also deletes the Google Analytics cookies already in your browser
• Google Analytics opt-out: Install the Google Analytics Opt-Out Browser Add-on
• Data deletion request: Contact us (see Section 10) and we will delete any identifiable data associated with your request

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where Google and Vercel operate. These transfers are necessary for the operation of the Service and are conducted in compliance with applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) where required by GDPR.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS/TLS encryption for all data in transit
• No storage of personally identifiable information on our servers
• IP anonymization in Google Analytics
• Regular review of third-party service security practices
• Minimal data collection principle — we only collect what is necessary

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

9. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us and we will promptly delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about our data practices, please contact us at:

• Website: https://saferoutes.online
• Email: puspalatha@hodolist.com

For EU/EEA residents: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.