Privacy Policy

Passenger Index LLC · Last updated October 8, 2026

This policy explains what personal information Passenger Index LLC ("we") collects through Passenger Index, how we use it and the choices you have. We collect as little as we need to run the Service.

What we collect

Account details, if you subscribe: your email address, your plan and its renewal or expiry date, and your password stored only as a salted, one-way hash (we cannot read your password).
Google sign-in, if you use it: Google tells us your email address and that it is verified. We do not receive your Google password or any other Google data.
Payment records: our payment processor, Stripe, handles your card details; we receive only what we need to manage your subscription, such as the plan, payment status and the last four digits of the card.
Emails you send us, and our replies.
Technical data: like any website, our hosting provider (Cloudflare) processes your IP address, browser type and the pages requested in order to deliver the site and protect it from abuse.

We do not use advertising trackers, analytics cookies or fingerprinting, and we do not buy personal data.

Cookies and browser storage

ir_session: a strictly necessary cookie set only when you sign in. It keeps you signed in for up to 14 days and is deleted when you sign out.
Your browser's local storage keeps two display preferences: light or dark theme, and whether the airport map is shown. They never leave your device.

How we use it

To provide the Service: sign you in, check your plan and show the data it includes.
To bill and manage your subscription.
To send account emails only when needed: a welcome note when you subscribe, password reset links you ask for, and notice of a price or policy change. We do not send marketing or update emails; the only regular email is the weekly newsletter, if you subscribe to it on Substack. Payment receipts, renewal reminders and billing notices are sent by our payment processor, Stripe.
To answer your questions, keep the Service secure and meet legal obligations.

We do not sell or rent your personal information, and we do not share it for advertising.

Who we share it with

Only service providers that run parts of the Service for us, under contracts that limit their use of it: Cloudflare (hosting and security), Stripe (payments, receipts and sales tax), Resend (delivery of account emails) and, if you choose Google sign-in, Google. The free weekly newsletter is published on Substack; if you subscribe there, Substack's own privacy policy applies to that subscription. We may also disclose information if the law requires it, or to protect our rights or users' safety.

How long we keep it

Account details are kept while you subscribe and deleted within 90 days after your subscription ends, except billing records, which we keep as long as tax and accounting law requires. Emails are kept as long as needed to deal with your request.

Your choices and rights

You can ask us to show you, correct or delete the personal information we hold about you, or to stop sending you emails, by writing to contact@passengerindex.com. Depending on where you live, you may have further rights under local law; we will honour them.

Security

Connections are encrypted (HTTPS), passwords are stored only as salted, slow one-way hashes, password reset links work once and expire after 30 minutes, and sign-in sessions are signed and checked on every request. No system is perfectly secure; if we learn of a breach affecting your information, we will tell you as the law requires.

Children

The Service is not directed to children under 16, and we do not knowingly collect their information.

Where we process data

Passenger Index LLC is based in the United States, and our providers may process data in the United States and other countries.

Changes and contact

We will post any change here and update the date above; for material changes we will also email subscribers. Questions: contact@passengerindex.com.