Privacy Policy

Last updated: April 2026

1. What We Collect

When you use Award Buddy, we may collect the following information:

  • Session tokens: When you navigate to an airline's website within your browser, Award Buddy captures a short-lived session token from the page. This token is the same one your browser already uses to keep you logged in — Award Buddy never sees your password.
  • Search parameters: Route information (origin and destination airports), date range, and cabin class preferences you enter into the extension.
  • Raw API responses: The raw response from the airline's search API is transmitted to Award Buddy's servers for parsing. Parsed results are returned to your browser and displayed.
  • Contact form submissions: If you submit a waitlist or support form, we collect your name and email address.

2. How We Use Data

  • Session tokens are used solely to make search requests to the airline's API on your behalf. They are not stored beyond the duration of the search.
  • Search parameters and raw API responses are sent to our servers for parsing only. We do not build profiles or link search data to individual users.
  • Contact form data is used only to respond to your inquiry or send early-access notifications you have requested.

3. What We Don't Do

  • We never store your airline account password.
  • We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.
  • We do not use your search data to build advertising profiles.

4. Data Retention

  • Session token and search data are not persistently stored after a search request completes.
  • Contact form data is retained only as long as necessary to resolve your inquiry.

5. Third-Party Services

Award Buddy uses the following third-party services, each governed by their own privacy policies:

  • Tally — used for contact and waitlist forms
  • Stripe / Gumroad — used for Pro subscription payment processing

6. Cookies

We use minimal cookies for language preference and session state. We do not use advertising or cross-site tracking cookies.

7. Your Rights & Contact

You may request deletion of any personal data we hold by contacting us through the support form on our website. We will respond within a reasonable timeframe.