Privacy Policy

Last updated 26 July 2026. This describes what this site actually stores, named specifically, rather than in the general terms a template would use.

The short version

We do not ask you for an account, a name or an email address, and we do not have one for you. We store two things: a route in your own browser so your search form stays filled in, and an anonymous per-city search counter on our server. Neither identifies you.

The parts of this site that involve a third party — the search results themselves, and the web fonts — are named below, because those are the requests that leave our control.

The cookie we set: tpwl_search_route

When you run a search, we write a first-party cookie named tpwl_search_route. It is set on this domain with SameSite=Lax, path=/, and an expiry of 365 days.

It contains only the search you just made: the origin and destination airport codes and names, and your departure and return dates. It contains no identifier, no name, no email and nothing about you.

It exists because the search results page is powered by our third-party search partner, which reads this cookie to know which route to search. Without it, clicking search would take you to an empty results page. The same data is also stored in your browser's localStorage under the same key, so the form is still populated when you return.

To remove it, clear cookies and site data for this site in your browser. The site keeps working; you just have to re-enter your route.

The counter we keep: destination searches

When a search completes, our server increments a counter for the destination city — literally one number per city, such as "London: 1,284".

No visitor identifier, IP address, session, device fingerprint or timestamp beyond "when this city was last searched" is stored with it. Two searches for London from two different people are indistinguishable from two searches by the same person. It exists so the homepage's popular-destinations list reflects real demand instead of a hand-picked guess, and that is the only thing it is used for.

Because there is no identifier, there is no record tied to you to request, export or delete — there is nothing in it that is yours.

Third parties

Our flight search partner (tpwgts.com). The flight results are served by a third-party search partner, embedded on our results page. When it loads it receives your IP address, as any web request does, and it sets its own cookies to run the search and to attribute a booking to us. Once you click through to an airline or agency, you are on their site under their privacy policy.

Google Fonts. Our pages load the Inter typeface from fonts.googleapis.com and fonts.gstatic.com. That request discloses your IP address to Google. No cookie is set by it.

Cloudflare. This site is hosted on Cloudflare, which processes requests and may log them for security and abuse prevention as part of serving the site.

We do not run Google Analytics, an advertising pixel, a session recorder or any cross-site tracker on this site.

What we never collect

  • No account, name, email address or phone number — we never ask for one
  • No payment details. Payment happens on the provider's site, never here
  • No advertising or cross-site tracking cookies
  • No individual browsing history or visitor profile

Your rights

Under the UK GDPR, EU GDPR and comparable laws you have rights of access, deletion and objection over personal data held about you. Because we hold no identifier for you, we hold no personal data to act on — the honest answer to a deletion request here is that there is nothing to delete.

The data that does relate to you is the cookie and localStorage entry, both of which are in your browser and under your control. For data held by our search partner or by an airline you booked with, contact them directly.

Questions: support@flymundus.com.

Changes

If this policy changes, the date at the top of this page changes with it. A change that affects what we collect will be described here rather than folded silently into the text.