Skip to main content

Site policy

Privacy policy

This notice explains how Mystiflights handles trip-request information, website security data and the communications needed to plan and service a journey.

The Grand Canal and historic rooftops of Venice seen from above
Venice, Italy. Photo by Wolfgang Moroder · CC BY-SA 3.0

01

Information we collect and why

When you submit a trip request, Mystiflights processes the contact details, travel requirements, preferences, consent choices and limited source attribution you provide so we can evaluate the request, communicate with you, research suitable possibilities and prepare planning recommendations. Essential infrastructure data is also processed to secure the service, prevent abuse and maintain reliable records.

Accessibility, dietary and additional planning context is optional, minimized and encrypted. Please do not submit medical records, passport or government-ID details, payment or bank information, confidential corporate records, insurance claims, exact child birth dates or children's names.

02

Service providers, retention and your choices

Contact consent is required so Mystiflights can respond to the request. Optional future-marketing consent and optional advertising-measurement consent are separate and unchecked by default. Cloudflare supports secure website operation and record processing; Resend sends the single request acknowledgement; and Google Gmail supports owner-reviewed sales correspondence. Public-web research and optional AI assistance receive only minimized, sanitized planning context and never advertising identifiers or supplier credentials.

If you separately allow advertising measurement and Mystiflights has enabled its Meta measurement connection, Meta may receive a durable Lead event identifier, the page where the request was submitted, permitted campaign identifiers, and hashed contact matching values. It does not receive free-form trip notes, destination wish-list prose, passport, payment, medical or supplier information. The browser and server use the same event identifier to avoid counting one accepted request twice.

Mystiflights keeps information only for the operational, legal, security and recordkeeping periods that apply to the request, then deletes or de-identifies it under its retention process. You may ask about access, correction or deletion by emailing trips@mystiflights.com. Some rights depend on applicable law and legitimate recordkeeping obligations.

Continue planning

Related paths through Mystiflights