Privacy Policy

Last updated 2 August 2026. This describes what this site actually stores, named specifically, rather than in the general terms a template would use.

The short version

We do not ask you for an account, a name or an email address, and we do not have one for you. We store two things ourselves: a route in your own browser so your search form stays filled in, and an anonymous per-city search counter on our server. Neither identifies you.

Separately, Google Analytics measures how the site is used, and a Travelpayouts tracking script attributes bookings made via our affiliate links back to us — both assign your browser an identifier. That, the search results themselves and the web fonts are the parts that involve a third party, and all of them are named below — those are the requests that leave our control.

The cookie we set: tpwl_search_route

When you run a search, we write a first-party cookie named tpwl_search_route. It is set on this domain with SameSite=Lax, path=/, and an expiry of 365 days.

It contains only the search you just made: the origin and destination airport codes and names, and your departure and return dates. It contains no identifier, no name, no email and nothing about you.

It exists because the search results page is powered by our third-party search partner, which reads this cookie to know which route to search. Without it, clicking search would take you to an empty results page. The same data is also stored in your browser's localStorage under the same key, so the form is still populated when you return.

To remove it, clear cookies and site data for this site in your browser. The site keeps working; you just have to re-enter your route.

The counter we keep: destination searches

When a search completes, our server increments a counter for the destination city — literally one number per city, such as "London: 1,284".

No visitor identifier, IP address, session, device fingerprint or timestamp beyond "when this city was last searched" is stored with it. Two searches for London from two different people are indistinguishable from two searches by the same person. It exists so the homepage's popular-destinations list reflects real demand instead of a hand-picked guess, and that is the only thing it is used for.

Because there is no identifier, there is no record tied to you to request, export or delete — there is nothing in it that is yours.

Third parties

Our flight search partner (tpwgts.com). The flight results are served by a third-party search partner, embedded on our results page. When it loads it receives your IP address, as any web request does, and it sets its own cookies to run the search and to attribute a booking to us. Once you click through to an airline or agency, you are on their site under their privacy policy.

Google Fonts. Our pages load the Inter typeface from fonts.googleapis.com and fonts.gstatic.com. That request discloses your IP address to Google. No cookie is set by it.

Google Analytics. We use Google Analytics 4 (measurement ID G-PCXHB0FLCV) to measure how the site is used — which pages are visited, which routes are searched for, and where visitors arrive from. It sets two first-party cookies, _ga and _ga_G-PCXHB0FLCV, each lasting about two years, holding a randomly generated identifier for your browser. GA4 does not store IP addresses. It is not loaded on the results page.

To opt out, use Google's browser add-on, block the cookies for this site, or use your browser's do-not-track or tracking-protection settings.

Travelpayouts. We use Travelpayouts as our flight-search and affiliate partner, including for the white-label search results described above. Separately, a Travelpayouts tracking script loads on every page of this site to attribute a booking made via any of our affiliate links back to us, regardless of which page you arrived on. It may set its own cookie(s) to do this.

Cloudflare. This site is hosted on Cloudflare, which processes requests and may log them for security and abuse prevention as part of serving the site.

We do not run a session recorder or any cross-site retargeting tracker on this site. The one exception to "no advertising trackers" is the Travelpayouts affiliate-attribution script named above — it exists to credit bookings to us, not to retarget or profile visitors across other sites.

What we never collect

  • No account, name, email address or phone number — we never ask for one
  • No payment details. Payment happens on the provider's site, never here
  • No retargeting pixels or session recorders, and no advertising cookie beyond the Travelpayouts affiliate-attribution script described above
  • No selling or sharing of data with advertisers or data brokers
  • Nothing on our own servers that ties a search to an individual visitor

Your rights

Under the UK GDPR, EU GDPR and comparable laws you have rights of access, deletion and objection over personal data held about you. Because we hold no identifier for you, we hold no personal data to act on — the honest answer to a deletion request here is that there is nothing to delete.

The data that does relate to you is the cookie and localStorage entry, both of which are in your browser and under your control. For data held by our search partner or by an airline you booked with, contact them directly.

Questions: support@flymundus.com.

Changes

If this policy changes, the date at the top of this page changes with it. A change that affects what we collect will be described here rather than folded silently into the text.