Privacy Policy
Last updated 29 June 2026
This policy explains what personal data Waysfare processes and your rights. It is written with the EU General Data Protection Regulation (GDPR) in mind. The data controller is Waysfare; contact us at [email protected].
What we collect
- Search inputs — your origin airport, travel months, budget, and the free-text “vibe” you type. Used to produce results.
- Account data (optional) — if you create an account, your email address and authentication identifiers. You can search without an account.
- Click and conversion data — when you click a booking link we record a click identifier so partners can attribute a resulting booking to Waysfare. This lets us measure which searches lead to bookings. We do not receive your payment details.
- Technical data — basic logs (e.g. request metadata) needed to run and secure the service.
Why we process it (legal bases)
- To provide the search and booking-handoff service you request — performance of a contract / your request.
- To attribute affiliate bookings and measure conversion — our legitimate interest in running a sustainable free service. We use a click identifier, not your booking’s personal details.
- To keep the service secure and reliable — legitimate interest.
Sharing
We do not sell your personal data. When you choose to book, you are taken to a third-party provider with a click identifier; your booking is then governed by that provider’s privacy policy. We use infrastructure and analytics processors under data processing agreements.
Retention
We keep search and click data only as long as needed for attribution and service analytics, then delete or anonymise it. Account data is kept until you delete your account.
Your rights
Under the GDPR you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and request portability. You can contact a supervisory authority. To exercise any right, email [email protected].
Cookies
We use only the cookies/identifiers needed to run the service and to attribute bookings. We ask for consent where required before setting non-essential cookies.