Privacy policy
Effective date: 1 November 2026. This policy explains how Truefly, a travel comparison and referral service based in Finland ("we", "us"), collects, uses and protects your personal data when you use this website, in accordance with the EU General Data Protection Regulation (GDPR) and Finland's Data Protection Act. Truefly is a comparison and referral platform: we do not take bookings or payments, so we collect only limited data, described below.
Data controller
Truefly, a service based in Finland, is the data controller for the personal data described in this policy. For any privacy query, or to reach the person responsible for data protection, contact contact@truefly.eu.
Information we collect
We only collect what you choose to give us or what is needed to run the site:
- Visa booking reminder (optional): if you opt in, we store the email address you enter, the route and dates of the trip you searched, and your expected visa-decision date, so we can email you a reminder to book.
- Truefly account (optional): if you sign in, we store your email address to authenticate you (via a passwordless magic link) and to show you your saved trips.
- Analytics (only with your consent): if you accept cookies, we log which outbound links you click and which page you came from, to understand which content is useful. This is not used to build a personal profile.
- Technical data: standard server logs (such as IP address and browser type) generated when any website is visited.
We do not collect passenger names, passport or document details, or payment/card information. When you book with a provider, you enter those directly on the provider's own website — they are the controller of that data, under their privacy policy, not ours.
Lawful basis and how we use it
We rely on your consent for the visa reminder emails and for analytics cookies (you can withdraw either at any time), and on our legitimate interest, or your request, to operate the optional account and keep the site secure and working. We do not use your data for advertising profiling and we do not sell it.
Processors and sharing
We use a small number of service providers who process data on our behalf: our hosting provider (Cloudflare), our database and sign-in provider (Supabase), and our email provider (Resend) to send reminders. When you click through to a travel provider, that provider and the affiliate network (Travelpayouts) may set their own cookies and process your data under their own policies — that activity is outside this policy. Where a processor is located outside the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.
Data retention
We keep visa-reminder details only until the reminder has been sent or you ask us to delete them; account data until you delete your account; and analytics for a limited period. We delete or anonymise data once it is no longer needed.
Your rights
Under the GDPR you have the right to access, correct, delete, or port your personal data, to withdraw consent, to restrict or object to processing, and to lodge a complaint with the Office of the Data Protection Ombudsman (Finland). Contact contact@truefly.eu to exercise these rights.
Cookies
By default we set no analytics cookies. We show a consent banner on your first visit; our own analytics only run after you accept. If you sign in, we use a strictly necessary cookie/token to keep you signed in. Travel providers you click through to set their own cookies on their sites. You can manage cookies in your browser and reopen our banner to change your choice at any time.
Contact
Privacy queries: contact@truefly.eu