Privacy policy · Flight Deal Spot

Last updated: October 8, 2026

Aubaine Air and Flight Deal Spot are the French and English versions of the same service, operated by Amaury Lavoine, sole proprietor (business number 733742472). This policy applies to both sites.

1. Information we collect

Account and sign-in: email address, identifier, and basic profile supplied by the provider you choose (Google, Facebook, LinkedIn, Discord, or email sign-in).
Travel preferences: airports, destinations, dates, radars, saved flights, notification preferences, alert frequency and time, and time zone.
Communications: feedback, support requests, referrals, and alert history.
Technical data needed for operation and security, such as error logs, IP address, browser, and session, language, or attribution cookies.
Where your first visit came from when you arrive through a tracked link (for example a Pinterest pin): source, campaign, and landing page, kept for 30 days in a site cookie only if you accept audience measurement, then linked to your account if you sign up. They only tell us which posts bring sign-ups; no third-party advertising tool receives them.
Push notifications (Premium): for each device where you turn them on, the subscription address supplied by the browser, its encryption keys, and the browser type.
Alert clicks: the links in our alerts go through a short link that counts clicks (number and date), with no IP address and no cookie. These counts are deleted after 90 days.
Approximate country and location: our host infers them from your IP address. We use them, at display time, to suggest the nearest airport we serve, departures from your region and the right currency. We do not store them.

2. How we use information

We use it to create and secure your account; display and personalize deals, saved flights, and radars; send alerts you enable, including, if your consent covers them, one or two other ideas departing from your radars’ airports when no offer matches; answer requests; improve the service; prevent abuse; and meet legal obligations.

Depending on the context and applicable law, processing is based on providing the requested service, your consent, our legitimate interests in operating and securing the service, or a legal obligation. You may withdraw consent for future processing.

3. Sharing and service providers

We do not sell your personal information. We may share it as needed with our hosting, database, and authentication providers (including Vercel and Supabase), your selected sign-in provider, and Discord if you connect it. The public map loads its tiles from OpenFreeMap; this sends the provider a network request that includes your IP address and technical information. Those parties process data for us or under their own policies when you use their services.

Email alerts: they are sent by Brevo (Sendinblue SAS, France), which receives your email address and the content of each alert. Brevo reports bounces, complaints, and unsubscribes to us: a permanent bounce suspends sending, and a complaint or an unsubscribe withdraws your consent to email alerts.

Push notifications: they go through your browser’s push service (Google, Mozilla, Microsoft, or Apple), which receives the encrypted message and the device’s subscription address.

Discord: joining our Discord server makes your Discord profile visible to the other members. Discord alerts arrive as a direct message from our bot.

Pinterest: we publish our deals and articles to our own Pinterest accounts (Aubaine Air, Flight Deal Spot) through the Pinterest API, connected by OAuth to those accounts only. Access tokens are kept on our servers and are used only to publish our Pins and read their statistics. We collect no data about other Pinterest users and never ask you to connect your Pinterest account.

Audience measurement: only if you accept measurement (“Accept all”, or the “Audience measurement” box under “Choose”), we use Google Analytics (Google LLC) to learn which pages are viewed and where visitors come from. Google then receives browsing data (pages viewed, visit source, device type and model, approximate city and country, and the main steps: a search, starting a radar, a Premium payment — never the text you type) and sets “_ga” cookies kept for up to 13 months. Advertising signals, ad personalization, and Google Signals are turned off, and we never send your name or email address. Reports are kept for 14 months. Google may process this data in the United States. Without your consent, no data is sent to Google. Your choice is kept for 6 months; you can change it at any time with “Cookie settings” at the bottom of every page.

Advertising: only if you accept advertising (“Accept all”, or the “Advertising” box under “Choose”), the site loads the pixel of Meta Platforms (Facebook, Instagram). Meta then receives the address of the pages you view, technical data about your browser and device (including your IP address), and the steps that follow one of our ads: signing up, creating a radar, starting a payment, and subscribing with its amount and currency. We never send your name or email address. Meta uses this to measure how well our ads on Facebook and Instagram work and to show you our offers in its apps; it processes this data under its own policy, also for its own purposes, and may process it in the United States. The pixel sets the “_fbp” and “_fbc” cookies, kept for 90 days. Without your consent, nothing is loaded or sent to Meta. This choice is separate from audience measurement, kept for 6 months, and can be changed at any time with “Cookie settings” at the bottom of every page.

We may also disclose information when required by law, to protect rights and security, or during a reorganization with appropriate safeguards.

3b. Payments and subscriptions

Payments are processed by Stripe, which acts as merchant of record under the Link brand for subscriptions. Stripe collects your payment method, name and billing address directly, as needed for the payment and the tax calculation, and sends you receipts and invoices. We never see your card details. To open the payment page, we send Stripe your email address, your language, and your account identifier.

On our side, we keep the link between your account and your Stripe customer, the state of your subscription, and evidence of confirmed payments and refunds (amount, currency, invoice identifier). Stripe, as merchant of record under the Link brand, keeps invoices and receipts under its own obligations. We keep this information for as long as your account exists; deleting the account erases it.

3c. Cookies we set

Necessary cookies make sign-in, Discord linking, language, referrals and your choices below work; they cannot be refused. Measurement cookies (Google Analytics and where your first visit came from) and advertising cookies (Meta pixel) are only set after you agree, each with its own choice, and “Cookie settings” at the bottom of the page lets you change your mind at any time.

Cookie	Purpose	Duration
`sb-…-auth-token`	Keeps you signed in to your account.	Up to 400 days, renewed while you stay signed in, deleted when you sign out
`aubaineair_locale`	Remembers the language you chose.	1 year
`aa_consent`	Remembers your choice about measurement cookies.	6 months
`aa_consent_ads`	Remembers your choice about advertising cookies.	6 months
`aa_event`	Passes a one-shot event decided by the server, such as creating a radar.	5 minutes at most, deleted as soon as it is read
`travel_auth_return_to`	Brings you back to the page you came from after signing in.	10 minutes
`travel_auth_link_discord`	Completes linking your Discord account to your account on the site.	10 minutes
`travel_referral`	Remembers the code of the referral link you opened, to prefill it when you subscribe.	30 days
`aa_hero`	Remembers the last version of the top of the home page you saw while we try several, to learn which one comes before a sign-up. It only holds the version’s name and the time, no identifier; visits to each version are counted without it, anonymously.	30 days

Cookie	Purpose	Duration
`travel_attribution`	Remembers where a visit first came from (social link, newsletter, or the search engine’s name, never your search) and its landing page, to learn what brings sign-ups. Set only after you agree.	30 days
`_ga, _ga_…`	Google Analytics: tells visits apart and measures page usage. No advertising, no cross-site tracking.	13 months

Cookie	Purpose	Duration
`_fbp`	Meta pixel: recognises your browser to measure our Facebook and Instagram ads (a sign-up or a subscription after an ad) and show them to you again. Set only after you agree.	90 days
`_fbc`	Meta pixel: remembers the Facebook or Instagram ad you clicked. Set only after you agree.	90 days

The site also keeps a few settings in your browser’s local storage: your recent destinations, the Discord step already completed, the prompt to install the app, and the answer you already gave on a deal. This data never leaves your device.

3d. YouTube videos

We publish our short videos (Shorts) on our Aubaine Air and Flight Deal Spot YouTube channels using YouTube API Services, provided by Google. These services are only used to upload our own videos to our own channels: the site never asks you to connect your YouTube or Google account for this, and we access none of your information through them.

When you watch our videos on YouTube, Google processes your data under its own privacy policy. YouTube may show third-party content or ads around our videos; we do not choose them. The link in the description first leads to our site, which counts the click with no IP address and no cookie.

If you have allowed an application to access your Google data, you can revoke that access at any time from the Google security settings page.

4. Retention and transfers

We retain information while your account is active or as needed for the purposes described. After a deletion request, it is deleted or anonymized unless limited retention is required by law, security, fraud prevention, or legal claims. Copies may remain temporarily in secured backups.

Our providers may process data outside your province or country. Where required, we use appropriate safeguards.

5. Your choices and rights

Depending on where you live, you may request access to, correction or deletion of, or a copy of your information; withdraw consent; or object to certain processing. You can also change preferences and turn off your email, Discord, or push notification alerts.

To exercise a right, email contact@aubaineair.com. We may need to verify your identity, and some requests may be limited by law.

6. Security, children, and updates

We use reasonable measures to protect information, but no system can guarantee absolute security. The service is not directed to children who cannot validly consent in their jurisdiction.

We may update this policy. The date above identifies the current version, and we will provide appropriate notice of material changes.

7. Person in charge of the protection of personal information

The person in charge of the protection of personal information is Amaury Lavoine, operator of the service, business number 733742472.

Mailing address: 1338 Wellington Street West, Unit 10, Ottawa Ontario K1Y 3B7, Canada
Email: contact@aubaineair.com

8. Contact us

Amaury Lavoine
contact@aubaineair.com