Privacy Policy

Unless you turn analytics off (with "Reject all" or in your privacy choices), we use Vercel Web Analytics for anonymous, cookie-free page-view statistics: pages visited, referrer, country and device type. No personal data is collected or stored, and it does not use cookies.

If you create an account, we store your email address, username, first and last name, and your password with our account provider, Supabase. Your password is stored only as an encrypted (salted and hashed) value; neither Dorovia nor Supabase can read it. Trips you save in the Trip Planner (stops, dates and items you add) are stored in your account, and database rules allow only you to read or change them. We use your email to confirm your account and to send password reset links when you ask for one. You can reset your password from the log in page, and you can permanently delete your account and saved trips at any time in Account settings, or ask us to with the request form on the Contact page.

To show live fares, your flight search (origin, destination, dates, cabin class and passenger count) is sent from our servers to our fare data provider, Ignav. No personal data is sent: not your name, email, account or IP address. When you select Book on a live fare, we ask Ignav for booking links for that flight in the same way. Search results are kept for up to 15 minutes so identical searches can reuse them; they contain routes, dates and fares, nothing about you. To limit live searches to 20 per hour per visitor, we store a one-way hash of your IP address with the time of each live search for up to a day. We do not store your search history.

Dorovia does not collect, store, or transmit loyalty account credentials. Selecting a points booking option opens the relevant airline's official website in a new tab; all credential handling is done directly between you and the airline.

In demo mode, passenger details entered in the booking form (name, date of birth, email) are held in browser memory for the duration of the session only. Nothing is sent to any server.

Dorovia does not use advertising or tracking cookies. We use two kinds of necessary first-party cookies: sign-in cookies, set when you log in and removed when you log out, and one cookie that remembers your privacy choices (for a year). Your currency choice is stored in your browser's localStorage, and a Trip Planner trip in progress is kept in session storage for the current tab; you can clear both at any time through your browser settings. Vercel Web Analytics is cookie-free. Sponsored placements are our own content and load no third-party ad scripts or cookies. Third-party services (such as fonts) may operate under their own privacy policies.

A small banner asks for your choices: Accept all, Reject all, or Customize (necessary, always on; analytics; ads and personalization). Analytics is on and ads and personalization are off until you choose. You can change your choices anytime at /privacy/choices, also linked as "Do Not Sell or Share My Personal Information" at the bottom of every page. Dorovia does not sell your personal information. If you opt out of sale and sharing (including with "Reject all"), we also leave your searches out of anonymous travel trends and keep sponsored offers off. If your browser sends a Global Privacy Control signal, we treat it as that opt-out automatically. Your choice is saved in a cookie in your browser and, when you are logged in, also in your account so it applies on your other devices.

If you allow ads and personalization, Dorovia may show one labeled "Sponsored" travel offer on a page, only near booking options (below search results, in the "Choose where to book" dialog, or in Trip Planner suggestions). Offers are chosen from the page you are on, not from a profile of you, and are never shown to Premium members, with Global Privacy Control on, or after you opt out of sale and sharing. Selecting one works like other partner links (see Links to partner sites).

To understand travel demand, we count flight searches by route (airports) and travel month, once per visitor per day. To count each visitor only once, we briefly keep a one-way hash of the IP address, deleted when the day ends; nothing else about you is kept with the count. Only groups of at least 50 visitors ever leave our database, and Dorovia may share or license these aggregate statistics. Searches are not counted if you opted out of sale and sharing or your browser sends Global Privacy Control.

If you share a trip, we store the email addresses you invite, their role (can edit or can view) and, once they join, which account accepted the invite. The trip owner and its members can see who is on the trip. A view-only link shows the trip (its stops, dates and the items added) to anyone who has the link, without showing who made it; turning the link off stops it working. Removing someone, leaving a trip or deleting it removes their access, and invites are deleted with the trip. We do not send emails for invites yet; the owner sends the link.

When a flight search returns live prices, we store the route, trip type, cabin, departure date and the lowest fare per person, to show typical prices for that route. Nothing about you or your search is stored with it: no account, IP address or other personal data.

When you use "Plan with AI", your answers are sent from our servers to our AI provider, Anthropic, to write the questions and build the plan. Dorovia does not store the chat or the plan; only a trip you choose to save in your account is kept. To apply the daily limit, we count how many plans and questions your account uses each day (counts only, no content), and these counts are deleted with your account. Please do not share card numbers, passwords or other sensitive details in your answers.

Calendar files and links are created in your browser; Dorovia does not store them. If you use a Google Calendar or Outlook.com link, the event details (stop, dates, the items you added and a link to Dorovia) are sent to Google or Microsoft when you open it, under their privacy policies.

If you use the points wallet, we store the loyalty programs you add, your balances, any expiry dates and any value per point you set, in your Dorovia account with Supabase. Database rules allow only you to read or change them. We never ask for, see or store loyalty program logins or passwords: you type balances yourself. We use them only to show your wallet and to mark award prices you can cover in flight results. You can edit or delete any balance at any time, and all of them are deleted when you delete your account.

Links to sellers, card issuers, loyalty programs and partner sites (such as GetYourGuide, Booking.com, KAYAK, Airalo, Priority Pass, Kiwitaxi, Bounce and Wise) go through an Dorovia link that records the click and then opens the partner site. We record the kind of link, the partner, the item, the Dorovia page you were on, the time, and a random reference for the click, plus your account if you are logged in (removed if you delete your account). The random reference is added to the partner link so the partner's commission report can be matched to the click; it identifies the click, not you. We do not record your IP address for clicks. We use this to count clicks and to match commissions: Dorovia may earn a commission when you book or apply through some links, at no extra cost to you. This never affects how results are ranked. Once you are on a partner site, its own privacy policy applies.

If you join the Dorovia Premium waitlist, we store your email address, the plan you chose (monthly or yearly) and the date. We use your email only to tell you about the Premium launch, never for anything else, and we do not share it. You can unsubscribe anytime with the link in any of those emails, or by sending a privacy request on the Contact page, and we will delete your entry. To limit sign-ups to 5 per hour per visitor, we briefly store a one-way hash of your IP address (deleted within a day).

When you use the request form on the Contact page, we store the request type, your email address, your message, a reference number, the date, and a one-way hash of your IP address. The hash is used only to limit how many requests can be sent per hour and cannot be turned back into your IP address. The request is stored in our Supabase database, where it can be read only by Dorovia, and we use it only to handle and reply to your request. The AI support chat is separate: Dorovia does not save chat conversations, and the chat cannot receive requests.

Questions about this policy, or want to access, correct or delete your data? Send a privacy request with the request form on the Contact page.