Privacy & cookies
What we store, why, for how long, and your rights. Last updated 23 October 2026.
Who is responsible
The data controller for StatusFlyer is:
Helmbaek ConsultingCVR 37099317Falkoner Alle 45, 4. tv, 2000 Frederiksberg, DenmarkWhat we store and why
| Data | Why | How long |
|---|---|---|
| Your e-mail address and when you last logged in | Your account, login links and the alerts you ask for (contract) | Until you delete your account |
| Your travel profile: home airports, who you travel with (relation and children's ages, never names), trip styles, airline preferences, Deal Radar routes, favourites and alert settings | To match deals to you and send alerts (contract) | Until you change it or delete your account |
| Frequent flyer details you enter: programmes, balances and tiers, status goals and their monthly history, the cards you hold and your yearly card spend, vouchers, award alerts, flights you track for compensation (including booking reference) | The Pro and Elite tools you use (contract) | Until you remove them or delete your account |
| Group trips: the organiser's trip details, and for each person who answers the name they choose, home airport, votes, wishes, comment and an optional flight budget (the budget is shown only to the organiser) | To plan the trip together (contract with the organiser; guests choose what to share) | Until the organiser deletes the trip or their account |
| E-mails we send you (login links, alerts) | A record of what was sent, and so you never get the same alert twice (legitimate interest) | Until you delete your account |
| Messages you send through the contact form | To answer you (legitimate interest) | 12 months |
| Clicks on partner links: which deal or route, which partner and when, without any personal data | To see which deals are useful and to settle commissions with partners (legitimate interest) | Up to 24 months |
We never sell your data, and we never share your e-mail address with partners.
Services that process data for us
- Anthropic (Claude) writes group trip plans. It receives the trip details and the answers people gave (names as chosen, airports, votes, wishes, comments and budgets). It is used only when the organiser asks for a plan.
- aviationstack receives the flight number of a flight you track, on the day you fly, to check for delays.
- seats.aero receives routes and dates from award alerts, never who you are.
- SerpApi receives a route and dates when you press “Check live price”, never who you are.
- Push notifications, if you turn them on, travel through your browser maker's push service (Google, Apple, Mozilla or Microsoft). We store the device's push address, not your location or contacts; turning notifications off deletes it.
- Resend delivers our e-mails (your e-mail address and the message).
- Our hosting provider stores the database.
Some of these providers are based outside the EU/EEA, for example in the USA. We only use providers that offer the EU Standard Contractual Clauses or are certified under the EU-US Data Privacy Framework.
When you follow a Reklamelink to a booking site or card issuer (for example Aviasales, Kiwi.com or a bank), you leave StatusFlyer. That site's own privacy policy and cookies apply from then on, including the affiliate cookie that tells it we referred you.
Cookies and browser storage
We only use what is needed for the site to work. We use no advertising or tracking cookies, so we don't ask for cookie consent. Fonts are served from our own server, so no request goes to Google.
| Name | Purpose | Lasts |
|---|---|---|
ra_session (cookie) | Keeps you logged in | 30 days, or until you log out |
ra_trip_… (cookie) | Lets a guest change their answers to a group trip without an account | 1 year |
ra_admin (cookie) | Staff login to the admin page only | 8 hours |
rejseagent-prefs-v2 (browser storage) | Your travel profile when you are not logged in; it never leaves your browser | Until you clear it in Account settings or your browser |
ra_seen_deals, ra_new_deals (browser storage) | Which deals you have already seen, to mark new ones; never sent to us | 60 days / until you close the tab |
Your rights
- See and download everything we hold about you: Account settings → Download my data.
- Correct it at any time in your account.
- Delete your account and all your data: Account settings → Delete account. Trips you organised are deleted too.
- Object or ask a question through our contact page.
- Complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.