Home / Privacy policy

Privacy policy

Effective 23 July 2026.

0. Acceptance

By using divefare.com, creating a price alert, or following partner links, you confirm that you have read this policy, understand it, and agree to it. If you do not agree with any part of it, please stop using the site.

1. Who we are

DiveFare (divefare.com) is a flight price tracking service. You subscribe to a route and a target price, and we notify you when a ticket drops to your limit. We are not a search engine, a travel agency, or a booking system, and we do not sell tickets.

2. Cookies and local storage

  • Essential — needed for the site to work: the Django session (sessionid), CSRF protection (csrftoken), your cookie-consent choice (divefare_cookie_consent_v1 in localStorage), and your currency preference (df_currency).
  • Analytics — Google Analytics 4. It collects anonymised usage data (device type, referral source, on-site behaviour) that does not identify you personally. Analytics load only after you accept cookies.
  • Partner cookies — when you follow a booking link to Aviasales / Travelpayouts, the partner may set its own cookies on its side.

You can manage cookies in your browser's privacy settings. Disabling essential cookies may break alerts and forms.

3. Data we collect

  • Web push subscriptions. When you enable browser push, your browser gives us a cryptographic endpoint (the push server address of Google / Mozilla / Apple), a public key (p256dh) and an auth secret. These are technical values used solely to deliver push messages about prices on the routes you chose. No name, email or phone is requested for push.
  • Email subscriptions. If you choose email alerts, we store the email address you provide and subscription metadata: address-confirmation status (double opt-in via a code), confirmation date, and an unsubscribe token. The address is used only to send price alerts for your routes and service emails (the confirmation code). Outgoing email is delivered through our email provider Brevo (acting as a processor); replies to our support address are routed via ImprovMX. We do not sell your address or use it for advertising.
  • Alert parameters. The route, price limit, departure date range, and "direct only" flag you set.
  • IP address. Your IP is used transiently to detect your country and pick a display currency (via the Travelpayouts geolocation endpoint) and to rate-limit abuse of the code-request and subscribe endpoints. We do not build advertising profiles from it.
  • Analytics. Google Analytics 4 collects anonymised usage data as described in section 2.

4. How we use data

  • Send price alerts (browser push, email) according to your subscriptions.
  • Send service email: the address-confirmation code when you subscribe.
  • Improve the service based on anonymised analytics.
  • We do not sell your data or use it for third-party advertising.

5. Partner links

Booking buttons and price-check links lead to Aviasales via a Travelpayouts affiliate redirect. The price you pay is the same as buying directly. Aviasales may set its own cookies on its side, manageable in your browser settings.

6. Your choices and rights

  • Web push: on /notifications/, use "Turn off all alerts on this device".
  • Email: use the "Unsubscribe" link in any email (a page opens where you can unsubscribe from all or selected routes), or the one-click List-Unsubscribe button in your mail app, or "Unsubscribe from all email alerts" on /notifications/.
  • Access or deletion: to access or delete your data, email us (section 8). Once you unsubscribe, your address is no longer used to send mail.

7. Changes to this policy

We may update this policy. A new version takes effect when published on this page. Continuing to use the site after an update means you accept the new version.

8. Contact

Questions about data handling: support@divefare.com