Airline.az (https://airline.az) is a travel search website that collects and compares prices for flights, hotels, eSIM plans, tours and car rentals from different sellers. Users can create an account (with email or with Google) to save their searches. In this policy "Airline.az", "the app", "we" and "us" mean the Airline.az website and its operator. This policy covers the airline.az website and its services. The party responsible for your data is Airline.az. Questions: info@airline.az.
In short
- We don't sell your data or share it with others for advertising.
- We only collect what we need to provide the service, protect your account and improve the site.
- You can ask us to delete your account and your data at any time.
What we collect
When you create an account
Your first and last name, email, password (stored only as a one-way hash — nobody can read it), and optionally your phone number, country, language and profile photo. If you turn on two-step verification, its settings are stored too.
When you sign in with Google
From Google we receive only your name, email address, profile photo and Google account ID (the "openid email profile" scopes). We don't request or receive access to your contacts, Gmail, Google Drive or any other Google data. This information is used only to sign you in and show your account, and is not shared with anyone. Airline.az's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Your searches and choices
- Searches you save in your account.
- Offers you mark with the heart — stored in your own browser. If you turn on price notifications, their names and links are also sent to our server so we can follow their prices.
- General statistics: how often the site is visited, which routes are searched, the visitor's country, language and device type (phone/tablet/desktop). These statistics are not linked to your name, email or IP address.
Signing in with a fingerprint, Face ID or device code
If you turn this on, your device (phone, computer) creates a key pair for Airline.az only and protects it with your fingerprint, face or the device’s own sign-in code (PIN, computer password). The private key, your fingerprint, face and sign-in code never leave your device, and we never see them. We store only the public key, the device name (for example “iPhone · Safari”), and when it was added and last used. You can remove a device at any time in the “Security” section of your profile.
When you turn on notifications
If you allow push notifications, we store your browser’s notification address and encryption keys (issued by the browser’s push service — Google, Apple, Mozilla or Microsoft), the kinds of notifications you chose, your language and currency, your approximate city (for hot deals) and device type. The notification text is delivered encrypted through that push service. Clicks are counted only as totals. You can turn notifications off at any time in the site’s “Notifications” section or in your browser settings — this deletes this data.
Technical data
- IP address: for security (monitoring sign-in attempts and suspicious activity) and to estimate your location (country, city) — the site uses it to pick your language, currency and nearest airport. In flight searches the IP address is passed to our search partner, because their system requires it.
- Cookies and browser storage: see our Cookie policy. Non-essential cookies are only used with your consent.
How we handle Google user data
Data we access
When you choose "Sign in with Google" we receive only: your name, email address, profile photo and Google account ID (scopes: openid, email, profile). We don't request access to any other Google data.
How we use it
- To sign you in and create your account (or link it to an existing account).
- To show your name and photo on your profile page.
- To send important account emails to your address (for example, a two-step verification code).
We don't use Google user data for advertising, personalized or targeted ads, profiling, data brokerage, credit or lending decisions, selling, or training AI/ML models.
Airline.az's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and protection
The data is stored in your account record in our database on our hosting provider's servers. It is protected by: encryption in transit (HTTPS/TLS) for every connection; access to the database and admin panel restricted to authorized administrators only, with two-step verification available; passwords stored only as one-way hashes; limits on sign-in attempts and logging of suspicious activity.
Sharing
We don't share, sell or transfer data received from Google to any third party (except where required by law).
Retention and deletion
The data is kept while your account is active. You can request deletion of your account by writing to info@airline.az — the account and its data are deleted within 30 days. You can revoke Airline.az's access to your Google account at any time at https://myaccount.google.com/permissions.
How we use data
- To provide search, comparison and account features.
- To protect your account (sign-in attempt limits, two-step verification).
- To answer your inquiries and requests.
- To improve the site — only with general, anonymous statistics.
Who we share data with
- Sellers of tickets, hotels, eSIMs, tours and car rentals. Airline.az compares prices; when you choose an offer you go to the seller's website and buy there. From that point the seller's own privacy policy applies.
- Our search partner (Travelpayouts / Aviasales). In flight searches the search details (route, dates, number of passengers) and IP address are passed on.
- Google — for Google sign-in and, with your consent, anonymous statistics (Google Analytics).
- Yandex — only with your consent, for statistics (Yandex.Metrika: visits, click maps and session recordings). It does not run on sign-in, booking or payment pages.
- Hosting and email providers — the site and its emails run on their servers.
- When required by law — on a lawful request from public authorities.
We don't sell your data.
How long we keep it
Account data is kept while your account is active and deleted when the account is deleted. Inquiries are kept for as long as needed after they are answered, and security logs for a limited period.
Your rights
- See your data and correct it on your profile page.
- Ask for your account and data to be deleted — write to info@airline.az.
- Change your cookie choices at any time.
- Revoke Google sign-in access in your Google account's security settings.
Security
The site runs over HTTPS, passwords are never stored in readable form, and sign-ins are protected by attempt limits and two-step verification. No system is entirely risk-free, but we take reasonable measures to protect your data.
Children
The site is not intended for children. We don't knowingly collect data from anyone under 16.
Changes
We may update this policy; the date of the last update is shown at the top of this page.
Contact
Airline.az · info@airline.az