Privacy Policy – grflights.com
grflights.com is an independent website and web application for displaying flight information. It is not operated, endorsed, or represented by the airport, its operator, or any other official airport authority. It is a private initiative that retrieves flight data from an external API service and presents it in a user-friendly format.
When you use grflights.com, certain technical data may be transmitted to us, including IP address, timestamp, browser type and version, operating system, and pages visited. Technically necessary cookies and local storage data (e.g. language preferences) may also be used to provide the basic functions of the application.
If you turn on browser notifications for a flight, your browser gives us a push address and encryption keys issued by its push service (Google, Mozilla, Microsoft or Apple, depending on your browser). We store that address and those keys, the flight you follow and your language, and nothing else: no IP address and no device identifier. Our notifications reach your browser through that push service in encrypted form, so the push service cannot read their content. You can turn them off at any time from the notification, from the flight page or in your browser settings. We delete this data 30 days after your last flight alert subscription ends.
If you sign up for flight alerts via WhatsApp, the subscription starts only when you send us a WhatsApp message yourself. We then process your mobile number, the messages you send us, the selected flight, your language and the delivery status of our messages, solely to send you updates about that flight. These messages are transmitted through Meta's WhatsApp Business Platform (Cloud API), which may also process data outside the European Union; Meta's processing is governed by WhatsApp's own terms and privacy policy. You can stop the alerts at any time by replying STOP. We delete your WhatsApp data 30 days after your last subscription ends.
The flight data displayed on grflights.com is sourced from an external API service. We have no control over how this data is collected, updated, or verified by the API provider, and we accept no responsibility for its content.
Your data is stored only for as long as necessary to operate the application. Data is shared with third parties only where technically required (e.g. for push notifications via Google or Apple).
Under applicable data protection laws (including the GDPR), you have the right to access, rectification, erasure, restriction of processing, objection, and data portability. For any privacy-related enquiries, please contact us.