Privacy policy

Who is responsible

Overflown is a service of Overflown LLC, a United States company operated from California ([Overflown LLC’s address]), the controller of the data described here since [date Overflown LLC takes over the site]. Our representative in the European Union is [EU representative]. For any privacy matter, write to us at privacy@overflown.app.

Your Passport and your flights

To build your Passport we keep each flight's details: airports, date and flight number and, if you give them, the seat, the time, the registration and the aircraft, plus the name you choose for the Passport. Of the text you paste or the CSV you upload we keep nothing else: it is deleted when the import ends. The lines we couldn't read stay only in your browser, in that tab, so you can correct them.

There are no accounts or passwords: your Passport opens with a private link only you have, and it stays private until you press Share. Once shared, anyone with the public link sees the Passport's name, your flights (dates, numbers, times and registrations) and your countries.

We do this to give you the service you ask for (Article 6(1)(b) GDPR). Everything is kept until you delete the flight or the Passport.

Flight data from AeroDataBox

When you add a flight with its number, we ask AeroDataBox for its data through RapidAPI. We send them only the number and the date, never your personal data.

What AeroDataBox gives us (times, status, aircraft, registration) is deleted after seven days. If you add a flight with its number only, the airports also come from AeroDataBox, and you have seven days to confirm them: once confirmed they are yours; otherwise we remove the route and keep the number and date so you can type it yourself.

Reading text with Anthropic

If our reader can't understand some lines of the text you paste, we send Anthropic only those lines, with today's date, to extract the flights; if it can't understand most of them, the whole text. Before that we take out what isn't needed to read a flight: the names of people we recognize, email addresses, phone numbers, booking references, and card, document and loyalty numbers. We don't send your email, your IP address or any identifier. We never do this with a file you upload, such as a CSV.

Anthropic deletes what it receives within 30 days, unless it flags it for misuse of its service, in which case it may keep it for up to two years. From its answer we keep only the extracted flights. If you don't want a text to go through Anthropic, type the flights by hand or upload a CSV.

Email to recover your link

If you give us an email to receive your private link, we keep it with your Passport, with the date you agreed, and use it only to send you the link when you ask. We don't add it to any list or use it for news or advertising.

The basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time. It is deleted when you delete the Passport. The email we send you carries your private link, and our email provider, Resend, keeps it for 30 days.

App announcement

This is a different consent and a different list. If you tick the box, we keep your email, the platform you choose, the language, where you signed up (your Passport, if it was from your own), the date and the text you agreed to, to send you one email when the app is available. It is never filled in from the email in the previous section, nor the other way round.

The basis is your consent. We keep it for 24 months at most from when you sign up, or until you ask to be removed at privacy@overflown.app.

Poster orders announcement

If you ask us to tell you when poster orders open, we keep your email, the format you chose, the language, where you signed up (your Passport, if it was from your own), the date and the text you agreed to. It is another consent, separate from the two above: we use it only for one email when orders open.

We keep it for 24 months at most, or until you ask to be removed at privacy@overflown.app.

Poster orders

Orders are closed today. When they open, payment will be handled by Stripe: we never see or keep your card details. Stripe receives the amount, the shipping country and the poster's title, which may carry your Passport's name. From Stripe we receive your email, your name and the shipping address, and use them only for that order. Printing and shipping will be done by Gelato, which will receive the poster file and the address. To suggest a shipping country we use the approximate country of your connection, which Vercel tells us, without keeping it.

The basis is the purchase contract and, to keep a paid order even if you delete your Passport, our accounting obligations. An order that is never paid is deleted after 30 days.

Measurement

We count which steps get done (visits, Passports created and shared, links opened by others, interest in the poster) to decide what to build. For us only: no ads, no third-party cookies and no following you across other sites.

To join the steps of one visit together we keep nothing in your browser. Our server works out a key for the day from your IP address and your browser, mixed with a random value that changes every day and is deleted once the day is over, so the key can't be worked out again afterwards. Each event records which step it was, that key, the language, the Passport when the step is about one and, if you came from another site, only its main address. We don't keep your IP address or your browser.

We keep the events for 13 months. The basis is our legitimate interest in knowing how the site is used (Article 6(1)(f) GDPR), under the Spanish data protection authority's conditions for audience measurement. If you don't want us to measure your visits, turn off “Help improve Overflown”, here or at the foot of any page: we keep that preference in a technical cookie, delete your identifier and your events stop carrying one.

Help improve Overflown On

Cookies and browser storage

We use no third-party cookies. These are ours:

• NEXT_LOCALE: remembers the language you choose. First-party; deleted when you close the browser.
• of_optout: remembers that you don't want your visits measured. First-party; lasts 12 months.
• of_units: remembers whether you chose miles or kilometers. First-party; lasts 12 months.
• In the tab's storage, until you close it: the lines we couldn't read, so you can correct them, and a mark so your visits to your own shared map aren't counted.

Who else handles your data, and where

Overflown runs everything in the United States: our database is in Oregon, our server functions run in San Francisco and our emails are sent from Virginia. Static files, such as images and scripts, are served from Vercel’s network, from the location closest to you. These providers handle data on our behalf and under contract; for each, the mechanism its own data processing agreement sets out for data from Europe:

• Vercel (United States): hosts the site and sees every request, with your IP address; keeps logs for one day. Standard contractual clauses in its agreement; also certified under the Data Privacy Framework. It also handles, on its own account, usage data of its own service.
• Supabase (contract with Supabase Pte. Ltd., Singapore; servers in Oregon, United States): our database. Standard contractual clauses in its agreement; not certified under the Data Privacy Framework.
• Resend (United States; sends from Virginia and stores in the United States): sends our emails and keeps them for 30 days. Certified under the Data Privacy Framework, with standard contractual clauses in its agreement as well.
• Anthropic (United States): reading text, when needed; deletes it within 30 days. Standard contractual clauses in its agreement; not certified under the Data Privacy Framework.
• AeroDataBox, through RapidAPI (Nokia, United States): flight numbers and dates only, no personal data, so none of your data goes there.
• Stripe (United States; certified under the Data Privacy Framework, with standard contractual clauses as a fallback) and Gelato (Norway, in the European Economic Area), once poster orders open.

If you visit from Europe

When you use Overflown from the European Economic Area, the United Kingdom or Switzerland, your data goes to the United States: you send it to us directly, and we share it with the providers above only as described. Each of those transfers relies on what the provider’s own data processing agreement sets out, as listed above: the European Commission’s standard contractual clauses and, where the provider is certified, the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.

You can ask us for a copy of the clauses that apply at privacy@overflown.app.

Delete means delete

The “Delete the map” button removes your Passport, its flights and the recovery email at once. A shared Passport stops being visible at once; its image may take up to an hour to leave the cache.

What stays, with no link to your Passport: the measurement events (13 months) and your email in the announcement lists, if you signed up (up to 24 months or until you ask to be removed); and paid orders, which must be delivered and accounted for. Providers delete their copies on their own schedules: Vercel, one day; Resend and Anthropic, 30 days. The previews that apps such as WhatsApp or X keep when you share a link are out of our hands.

Your rights

You can access your data, correct it, delete it, restrict its use, object to it and take it with you, and withdraw at any time the consents you gave us. Much of this you do yourself from your Passport: editing or deleting flights and deleting the whole Passport. For anything else, write to us at privacy@overflown.app; we answer within one month at most.

If you think we don’t handle your data properly, you can complain to the data protection authority of your country; in Spain, the Spanish Data Protection Agency (AEPD).

Children

This site is meant for adults and collects no data from children.

Changes

If we change this policy, we'll update the date at the top and, if the change matters, we'll say so on the site.

This policy is written in English. If a translation differs from it, the English version controls.