Help topic: Privacy & security

  • What data Cheaplyfly collects and why

    We collect only what we need to run Cheaplyfly and keep it secure. This article is a short, practical summary. Our privacy policy is the full, official version.

    • Your search: route, dates, travelers and cabin, so we can show results.
    • Approximate location: worked out from your internet connection, never from GPS, to choose your currency and nearest airport.
    • Technical data: such as browser type, and a one-way scrambled (hashed) version of your IP address used for security and to limit abuse.
    • A few essential cookies: for example, to remember your currency and your cookie choice.

    If you create a price alert

    We store your email address and the alert details (route, dates, currency and target) so we can check prices and email you. Guests confirm their email before the alert starts.

    If you have an account

    • Account data: name, email address and password. Passwords are stored only as a secure hash, never as readable text.
    • Preferences: home airport, currency, photo and email settings.
    • Activity: saved items, price alerts, search history (if the site keeps it) and deals you opened with partners.
    • Notifications shown in your dashboard.

    If you contact us

    We keep your name, email address, the topic and your message so we can reply.

    What we never collect

    We never collect payment card details. You pay partners directly on their sites.

    Why we use it

    • To run searches, results, alerts and your account.
    • To send emails you asked for: alerts, account emails and newsletters if you subscribed.
    • To keep the site secure and prevent abuse.
    • To understand and improve the site, with your consent where required.

    Who we share it with

    We don’t sell your personal data. When you open a deal, the link passes your search details to the partner. We also use service providers for hosting, email delivery and, with your consent, analytics.

    How long we keep it

    • Account data: while your account is open.
    • Search history: until you clear it or delete your account.
    • Finished price alerts: removed automatically.
    • Security logs: for a limited period.

    Your choices

    1. See it: download your data from the Privacy tab in your dashboard.
    2. Reduce it: clear your search history, remove saved items or stop alerts.
    3. Delete it: delete your account from the Privacy tab.
    4. Limit tracking: choose essential cookies only. See the article on cookies.
    5. Ask us: email support@cheaplyfly.com for anything else, such as correcting data.

    Depending on where you live, you may have further rights, including the right to complain to your local data protection authority.

    Still stuck? Contact us and choose the privacy request topic, or email support@cheaplyfly.com.

  • Cookies and changing your cookie choices

    Cookies are small files a website stores in your browser. Cheaplyfly uses a few essential ones to work, and others only if you agree. Here is what that means in practice.

    On your first visit, a banner asks for your choice:

    • Accept all: essential cookies plus analytics and advertising measurement, if the site uses them.
    • Essential only: just what the site needs to work.

    The site works fully with either choice. Analytics and advertising tools don’t load until you accept them.

    Essential cookies

    These don’t need consent because the site can’t work properly without them:

    • Sign-in cookies keep you signed in.
    • cf_currency remembers the currency you chose, for up to a year.
    • cf_consent remembers your cookie choice, for about six months.
    • If you turn on two-step sign-in and trust a device, a cookie remembers that device for 30 days.

    We also keep your light or dark mode choice and recent places you searched in your browser’s local storage, on your device only.

    Analytics and advertising cookies

    Only with your consent, the site may use analytics (such as Google Analytics) and advertising measurement (such as Meta or TikTok pixels). They help us understand how the site is used. These cookies are set by those providers.

    Partner cookies

    When you press View deal, you go to the partner’s site. The partner and its tracking provider may set their own cookies to record that you came from Cheaplyfly. Their cookie policies apply there.

    Changing your choice

    1. Open our cookie policy. There is a link in the footer and in the banner.
    2. Press Change cookie settings.
    3. The banner appears again. Choose Accept all or Essential only.

    Your choice also expires after a while, and the banner asks again.

    Using your browser’s controls

    You can block or delete cookies in your browser settings. If you block essential cookies, some things won’t work: you may not stay signed in, and your currency choice may be forgotten.

    If this, then that

    • If the banner keeps coming back, your browser may be deleting cookies when it closes, or you are in a private window. Allow cookies for Cheaplyfly.
    • If you can’t stay signed in, check that cookies aren’t blocked for this site.
    • If your currency keeps resetting, the same applies. Signing in also saves your currency to your account.
    • If you accepted by mistake, change your choice as shown above. Tools you accepted stop loading on your next page view.

    Still stuck? Contact us and choose the privacy request topic, or email support@cheaplyfly.com.

  • Keeping your account secure

    Cheaplyfly accounts don’t hold payment details, but they do hold your email address, alerts and travel plans. A few simple habits keep them safe.

    Built-in protection

    • Passwords are stored only as a secure hash, never as readable text.
    • After several wrong passwords, sign-in pauses for 15 minutes to stop guessing.
    • New accounts usually confirm their email before the first sign-in.
    • Forms have checks against automated abuse.
    • Password reset links expire after an hour and work only once.

    Five things you can do

    1. Use a unique password. Don’t reuse a password from another site. A password manager makes this easy.
    2. Make it long. At least 8 characters is required; longer is better. A short sentence works well.
    3. Turn on two-step sign-in in the Security tab, if the site offers it. Then a password alone isn’t enough to get in.
    4. Protect your email account. Codes and reset links go there, so it is the key to your Cheaplyfly account.
    5. Sign out on shared computers, and don’t tick “Keep me signed in” or “Trust this device” there.

    If you think someone else used your account

    1. Sign in and open the Security tab in your dashboard.
    2. Change your password. Other devices are signed out automatically.
    3. Press Sign out other devices to be sure.
    4. Turn on two-step sign-in, if available.
    5. Check your alerts and saved items for anything you didn’t add.
    6. Tell us what happened.

    If you can’t sign in, use Reset password. The reset email goes to your account’s address.

    Watch out for fake messages

    Cheaplyfly doesn’t sell tickets or take payment. Be careful with any message that claims to be from us and:

    • Asks you to pay Cheaplyfly for a flight or a fee.
    • Asks for your card details.
    • Asks you to send your password or a sign-in code by email, chat or phone.

    Sign-in codes are only for you to type on our sign-in page. Never share them with anyone. If an email looks suspicious, don’t click its links: go to Cheaplyfly directly instead.

    If this, then that

    • If you get a sign-in code you didn’t ask for, someone may know your password. Change it now.
    • If you get a password reset email you didn’t ask for, ignore it. Your password doesn’t change unless the link is used.
    • If sign-in is paused after failed attempts, wait 15 minutes or reset your password.

    Still stuck? Contact us and choose the privacy request topic, or email support@cheaplyfly.com.

  • Recognizing genuine emails from Cheaplyfly

    Fake emails that copy well-known brands are common. Knowing which emails Cheaplyfly actually sends makes it easier to spot one that isn’t real.

    Emails we send

    Account emails

    • Confirm your email: a 6-digit code and a button, after you sign up.
    • Welcome: once your account is ready.
    • Sign-in code: a 6-digit code, if two-step sign-in is on.
    • Reset your password: a link, only after you ask for one.

    Price alert emails

    • Confirm your price alert: for alerts created without an account.
    • Price drop: the route, new price and previous price, with links to pause or stop the alert.

    Other emails

    • Newsletter emails, only if you subscribed and confirmed.
    • A copy of your message when you use the contact form, and our reply.

    What we don’t do

    • We don’t sell tickets, so we never send tickets or ask you to pay Cheaplyfly for a flight.
    • We don’t take card payments, so we never ask for card details.
    • Codes in our emails are for you to type on our site. We don’t ask you to read them back to anyone.

    Your tickets and booking emails come from the airline or travel site you booked with, not from us.

    How to check an email

    1. Did you just do something? A code or reset link should only arrive right after you asked for it.
    2. Look at the sender address. Be wary of addresses that look almost right but not quite.
    3. Hover over links (or press and hold on a phone) to see where they go before you open them.
    4. Look for pressure. Threats to close your account or demands for urgent payment are warning signs.
    5. When in doubt, go direct. Type the Cheaplyfly address yourself and sign in to check your alerts or account.

    If this, then that

    • If you got a code or reset email you didn’t ask for, don’t use it. If it was a sign-in code, change your password: someone may know it.
    • If you clicked a suspicious link and entered your password, change your password straight away and turn on two-step sign-in if available.
    • If an email asks you to pay Cheaplyfly, don’t pay. Forward the details to us through the contact form.
    • If a price drop email is about a route you never watched, someone may have used your email address. Use the Stop link, or tell us.

    Read more about protecting your account in the article on keeping your account secure.

    Still stuck? Contact us and choose the privacy request topic, or email support@cheaplyfly.com.

  • What happens to your data when you visit a partner

    When you press View deal or See live prices, you leave Cheaplyfly and continue on a partner’s website. It helps to know what information travels with you and who looks after it from then on.

    To save you typing, the link to the partner includes your search details:

    • The route: where from and where to.
    • Your dates.
    • The number of travelers and the cabin.
    • A reference that tells the partner you came from Cheaplyfly.

    The link doesn’t include your name, email address, password or account details.

    What we record

    When you open a deal, we keep a record of the click: the route, dates and the price shown. This helps us understand which deals are useful. If you are signed in, the deal also appears in your dashboard under Deals opened, so you can find it again.

    If you delete your account, these records are kept only without any link to you.

    On the partner’s site

    • Everything you enter there, such as names, passport details, contact details and payment, goes directly to the partner.
    • The partner’s own privacy policy and terms apply.
    • The partner and its tracking provider may set cookies to record that you came from Cheaplyfly.

    Cheaplyfly doesn’t receive your payment details or your booking.

    Before you book with a partner

    1. Check the name of the company you are booking with.
    2. Look for its privacy policy, usually linked at the bottom of the page.
    3. Check that the payment page is secure: the address starts with https and your browser shows no warnings.
    4. Only give the details needed for the booking.

    If this, then that

    • If you want a partner to delete your data, contact that partner. We can’t change data they hold.
    • If you start getting marketing from a partner, use the unsubscribe link in their emails. You may have agreed to it during their checkout.
    • If you want fewer cookies from partners, you can block third-party cookies in your browser. Partners may then be unable to credit Cheaplyfly, but your booking isn’t affected.
    • If you want to see what we recorded, download your data from the Privacy tab in your dashboard.

    Read our privacy policy, cookie policy and affiliate disclosure for the full details.

    Still stuck? Contact us and choose the privacy request topic, or email support@cheaplyfly.com.

  • Controlling the emails you get

    You decide which emails you get from Cheaplyfly. Each type has its own control, so you can keep the useful ones and turn off the rest.

    Newsletter

    The newsletter is optional. You can sign up in the footer form, or tick the box when you create an account.

    Signing up

    1. Enter your email address and press Subscribe.
    2. Open the confirmation email and press Confirm subscription.
    3. You get a short welcome email.

    Nothing is sent until you confirm. This double opt-in makes sure nobody signs you up without your permission.

    Unsubscribing

    Use the Unsubscribe link in your welcome email or at the bottom of a newsletter email. One click is enough, and you don’t need to sign in. If you can’t find the link, contact us and we will remove you.

    Price alert emails

    • Per alert: use Pause this alert or Stop this alert at the bottom of any price drop email.
    • Members: manage all alerts in the Price alerts tab of your dashboard.
    • Members who prefer no alert emails: in Profile, untick Email me about price drops on my alerts. Drops still appear in your dashboard notifications.

    Account emails

    Codes, password resets and similar messages are sent only when you need them, usually because you just did something. They can’t be turned off, because they keep your account working and secure.

    Contact form emails

    When you send us a message, you get a copy by email, and our reply arrives by email too.

    Making sure the emails you want arrive

    • Add our email address to your contacts or safe senders list.
    • If an email lands in spam, mark it as not spam. This helps future emails arrive.
    • Check promotions or updates tabs if your email app sorts mail into tabs.

    If this, then that

    • If you unsubscribed but still get alert emails, the newsletter and alerts are separate. Stop the alerts too.
    • If you still get emails after stopping an alert, you may have more than one alert for the route. Check each email’s route and dates.
    • If you never subscribed but get the newsletter, someone may have confirmed with your address. Unsubscribe and tell us.
    • If you want everything gone, delete your account from the Privacy tab and unsubscribe from the newsletter.

    Read our privacy policy for how we use your email address.

    Still stuck? Contact us and choose the privacy request topic, or email support@cheaplyfly.com.