Privacy policy

1. Who we are

www.skytravo.com ("SkyTravo", "we", "us") is run by Restaumy Ltd. Co., a Texas limited liability company. We are the "controller" of the personal data described in this policy, which means we decide how and why it is used.

Contact for any privacy question or request, by email only: hello@skytravo.com

2. The short version

• We don't use cookies.
• We use Cloudflare Web Analytics to count visits and see which pages are used. It's a privacy-first service that sets no cookies and doesn't track you across sites.
• We don't use tracking pixels or advertising trackers on the website.
• There are no accounts and no payments.
• We collect personal data only if you subscribe to the newsletter (your email address and language) or email us.
• We don't sell your personal data.

3. What we collect and where it comes from

When you browse the site. We don't collect information about you ourselves. Our hosting provider, Cloudflare, has to process technical data to deliver each page to you, such as your IP address, browser type (user agent), the page requested, and the date and time. Aggregate visit statistics come from Cloudflare Web Analytics. See Section 6.

When you use the checker. The passport country and destination you pick, plus the time you picked them, are saved in your browser's sessionStorage so the results page can show them. This stays on your device and is never sent to us. Your browser deletes it when you close the tab or window.

When you subscribe to the newsletter. The sign-up form sends the following to Brevo, our email provider:

• your email address;
• your newsletter language (English or Spanish), taken from the page you signed up on; and
• an empty anti-spam field that is used only to detect bots.

Your subscription starts only after you click the link in the confirmation email. As a record of your consent, Brevo keeps the name of the sign-up form and the date you signed up, plus the time and IP address of your click on the confirmation link.

When you open or click our emails. Our newsletter emails contain a small tracking image and tracked links. They tell us, for each subscriber, whether an email was opened and which links were clicked. You can avoid this by turning off images in your email app, or by unsubscribing.

When you email us. If you write to hello@skytravo.com, we receive your email address, your name if you include it, your message and anything you attach.

We don't ask for, and you shouldn't send us, passport numbers, copies of travel documents or other sensitive information. If you send them anyway, we will delete them once we no longer need them to reply.

4. How we use your data and our legal bases

We use personal data only for these purposes. The legal bases are those of the GDPR and UK GDPR.

• Delivering the website, keeping it secure and preventing abuse. Data: technical request data processed by Cloudflare. Legal basis: our legitimate interests in running a secure, working website (Art. 6(1)(f)).
• Understanding which pages are used and improving the site. Data: aggregate visit statistics from Cloudflare Web Analytics (pages viewed, referring sites, countries, browsers and page performance). Legal basis: our legitimate interests in understanding which pages are used and improving the site (Art. 6(1)(f)).
• Sending the newsletter in your language and confirming your subscription. Data: email address, language and consent record. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Replying to your emails and fixing errors you report. Data: your email and its contents. Legal basis: our legitimate interests in answering you and keeping our information accurate (Art. 6(1)(f)).
• Complying with the law and handling legal claims. Data: any of the above, as needed. Legal basis: legal obligation (Art. 6(1)(c)) and our legitimate interests (Art. 6(1)(f)).

We don't use your data for automated decision-making or profiling that has legal or similarly significant effects on you.

5. Who we share it with

We don't sell your personal data. We share it only with these service providers ("processors"), which handle it on our behalf. Cloudflare and Brevo process it under data processing agreements that limit them to processing it for us. Zoho processes our email under its own privacy commitments, and we are putting a data processing agreement with Zoho in place.

• Cloudflare, Inc. (United States): website hosting, content delivery, security and visit statistics (Cloudflare Web Analytics).
• Brevo (Brevo Inc., United States, part of the Brevo group headquartered in France): newsletter sign-up, confirmation emails, sending the newsletter and storing subscribers. Brevo stores this data on servers in the European Union.
• Zoho Corporation (United States): our email inbox for hello@skytravo.com, hosted in Zoho's United States data center.

We may also disclose personal data if the law requires it, to protect our rights or the safety of others, or to a successor if the Service is transferred to another company.

6. Hosting, analytics and network error reports

SkyTravo is a static website hosted on Cloudflare Workers. Cloudflare processes request data, including IP addresses, at its global network to deliver and protect the site. We haven't set up any log export of our own. Cloudflare's handling of this data is described in its own privacy policy.

We use Cloudflare Web Analytics to count visits and see which pages are used. Cloudflare processes this data on our behalf, as our service provider. It's a privacy-first service: it sets no cookies, stores nothing in your browser and doesn't track you across sites. It gives us only aggregate figures: pages viewed, referring sites, countries, browsers and page performance.

Cloudflare also sends Network Error Logging (NEL) headers. These let your browser report failed connections to Cloudflare (a.nel.cloudflare.com), to help keep the network reliable. With the current settings, browsers report only failures, not successful page loads.

7. International transfers

We are based in the United States, Cloudflare serves the site from data centers around the world, Brevo stores newsletter data in the EU, and Zoho hosts our inbox in the United States. Your data may therefore be processed outside your country, including in the United States.

Where data from the EU, UK or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards:

• Cloudflare: its certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions), and the European Commission's Standard Contractual Clauses (with the UK Addendum) in Cloudflare's Data Processing Addendum, which is part of our Cloudflare service agreement.
• Brevo: the data processing agreement that is part of Brevo's terms of service, which provides for the Standard Contractual Clauses and, where applicable, the Data Privacy Framework.
• Zoho: Zoho processes our email under its own privacy commitments. We are putting a data processing agreement with Zoho in place.

You can ask us for more details at hello@skytravo.com.

8. How long we keep it

• Newsletter: until you unsubscribe or ask us to delete your data. After you unsubscribe, Brevo keeps your email address on a suppression list so we don't email you again by mistake.
• Unconfirmed sign-ups: if you don't click the confirmation link, you are never added to our list, and the link expires after 30 days. Brevo keeps a record of the sign-up attempt and the confirmation email in its sending logs. Those logs, including unconfirmed sign-up attempts, are deleted after 1 month.
• Emails to hello@skytravo.com: as long as we need them to deal with your message, and then no longer than 24 months.
• Cloudflare request data: kept by Cloudflare for its own limited periods, as described in its policies. We don't keep our own copy.
• Cloudflare Web Analytics: kept by Cloudflare, which shows us aggregate figures for the past six months. We don't keep our own copy.
• sessionStorage in your browser: until you close the tab or window.

9. Cookies and similar technologies

We don't set any cookies and we don't use localStorage. The only browser storage we use is sessionStorage, as described in Section 3. It is strictly necessary for the checker to work and is never sent to us.

Because we don't use cookies or advertising trackers, there's no cookie banner. Cloudflare Web Analytics (Section 6) sets no cookies and stores nothing in your browser. If we ever add cookies or trackers, we'll update this policy first and ask for your consent where the law requires it.

Do Not Track and Global Privacy Control. We don't track you across other websites and we don't let third parties do so on our site, so browser "Do Not Track" and Global Privacy Control signals don't change how the site works.

10. Your rights

You can contact us at any time to ask what data we hold about you, to correct it, to delete it, or to stop receiving the newsletter.

EU, EEA, UK and Swiss residents. Under the GDPR and UK GDPR, you have the right to:

• access your personal data and get a copy of it;
• correct inaccurate data;
• have your data erased;
• restrict or object to our processing, including processing based on legitimate interests;
• receive your data in a portable format; and
• withdraw your consent at any time, without affecting the lawfulness of processing before you withdrew it. The easiest way is the unsubscribe link in every email.

You also have the right to complain to a data protection authority, such as the one where you live (in the EU), or the Information Commissioner's Office (in the UK). We'd appreciate the chance to address your concern first.

US residents. Depending on your state, privacy laws such as the California Consumer Privacy Act (CCPA/CPRA) and the Texas Data Privacy and Security Act (TDPSA) may give you rights to know, access, correct, delete and get a copy of your personal data, and to opt out of the sale of personal data, targeted advertising and certain profiling. We don't sell personal data or use it for targeted advertising or profiling. Although these laws may not apply to a business of our size, we'll honor these requests from any user.

California "Shine the Light". We don't share personal information with third parties for their own direct marketing purposes.

How to make a request. Email hello@skytravo.com from the address the request is about, so we can verify it's you. We'll reply within one month (GDPR) or 45 days (US state laws). In some cases we can extend that as the law allows, and we'll tell you if we do. Requests are free. You won't be treated differently for using your rights. An authorized agent may make a request on your behalf, with proof of authorization.

Appeals. If we decline your request, we'll explain why. You can appeal by replying to our decision with "Appeal" in the subject line. We'll respond within 60 days. If you're a Texas resident and we deny your appeal, you can contact the Texas Attorney General.

11. Children

SkyTravo is meant for a general audience and is not directed at children. We don't knowingly collect personal data from children under 13, or under 16 in the EU and UK. If you believe a child has subscribed to the newsletter, email us and we'll delete the address.

12. Security

We keep the data we hold to a minimum and use reputable providers that protect it with measures such as encryption in transit (HTTPS) and access controls. No system is completely secure, but if a breach affects your personal data, we'll notify you and the authorities as the law requires.

13. Links to other websites

We link to official government websites and to Unsplash photo pages. Once you leave SkyTravo, the other site's privacy policy applies, not ours.

14. Changes to this policy

We may update this policy. We'll post the new version on this page and change the "Last updated" date. If the change is significant, for example a new type of data or a new use for it, we'll also highlight it on the site and, where appropriate, tell newsletter subscribers by email before it takes effect.

15. Contact

Restaumy Ltd. Co. (SkyTravo), a Texas limited liability company

Email: hello@skytravo.com