Privacy
Short. Signed out, nothing you type leaves your browser. Signed in, three things do: your email, your balances, and your Pro pass.
Where your balances live
In your browser, under localStorage, on the device you typed them on. Signed out, that is the only copy anywhere. Signed in, the same balances are also kept against your account on our server so another device can pull them, and they are deleted when you delete the account.
Every award price, transfer ratio and airport charge is compiled into the page itself, so working out what your points can book is arithmetic your own device performs. No search you run here is transmitted, logged or seen.
One cookie, only when signed in
Signing in sets a cookie named pp_session holding a random session id and nothing else. It is strictly necessary for staying signed in, which is the thing you asked for by signing in, so there is no consent banner. Signed out, no cookie is set at all.
Accounts
Optional. There is no password: you sign in with a code emailed to you, or with Google or Apple. We keep your email address, and if you used Google or Apple, the opaque id they give us. Nothing else about you. The email is used to send sign-in codes and for nothing else; there is no mailing list.
Sign-in codes are sent through Resend. Google and Apple see that you signed in to this site, as they do for any site using their sign-in.
Payments
Pro passes are paid for through Razorpay. Your card or UPI details go to Razorpay, not to us; we receive a payment id and which plan was bought, and keep that against your account so the pass can be restored.
What is not collected
No advertising or analytics trackers. No third-party scripts of any kind. No fingerprint, no session recording, no cross-site identifier. Nothing is sold, shared or profiled, because nothing is received in the first place.
Whoever hosts these files will see the ordinary web-server record of a file being requested, meaning an IP address and a page name, the same as any site. That is outside this site's control and is the one thing on this page we cannot promise away.
Deleting it
Signed out: clear this site's data in your browser, or use the reset control in the wallet. That is the only copy. Signed in: the account page deletes the account, its balances and its pass in one step, and nothing is retained.
Photographs
The city photographs come from Wikimedia Commons, every one under a licence permitting redistribution, and each is credited with its author and licence on the page that shows it. They are served from this site rather than hotlinked, so viewing one does not tell anybody else that you did.