Privacy & Cookie Policy
Last Updated: 26 July 2026
1. Who We Are
Jet Lag Plan™ is a Farlounge™ service. For the personal data described in this policy, Jet Lag Plan™ is the data controller. Questions and data-rights requests can be sent to support@jetlagplan.com.
2. Data We Process
- Planner information: itinerary, dates, time zones and preferences such as chronotype and caffeine tolerance that you submit to generate a plan.
- Saved plans and trips: plan content, identifiers and saved itineraries needed to restore a plan or complete an interrupted checkout.
- Account information: email address, sign-in records, plan entitlements, trip credits, referrals and subscription status when you use account features.
- Payment information: Stripe processes card and payment details. We receive transaction identifiers, payment status, product tier and limited billing information, but not your full card number.
- Technical and usage data: security logs and basic request information needed to operate the service. If you accept analytics, Google Analytics also receives usage data such as pages viewed, device/browser information and approximate location.
We do not intentionally send the itinerary or preference values entered in the planner to Google Analytics, and we do not use them for advertising profiles.
3. Why We Use Data
- Provide the service and paid features: to generate, save, restore and unlock plans, manage accounts and complete purchases. Our legal basis is performing our contract with you or taking steps you request before entering a contract.
- Security and reliability: to prevent abuse, enforce rate limits, diagnose failures and protect accounts. Our legal basis is our legitimate interests in operating a secure service.
- Payments, tax and legal records: to process transactions and meet applicable accounting or legal duties. Our legal bases are contract and legal obligation.
- Analytics: to understand aggregate use and improve the site. We load Google Analytics only after your consent, which you can withdraw at any time.
4. Cookies and Local Storage
Essential storage is used only where needed to deliver a feature you request, remember your settings, keep accounts secure or remember your cookie choice. Non-essential analytics remains disabled unless you actively accept it.
| Technology | Purpose | Typical duration | Category |
|---|---|---|---|
| jlp-cookie-consent-v2 | Remembers whether you accepted or rejected analytics. | 6 months | Essential |
| Session, unlock and security storage | Sign-in, paid-plan access, security and requested planner/settings features. | Session or feature-dependent | Essential |
| _ga, _ga_* | Distinguishes users and sessions for Google Analytics. | Up to 2 years, subject to browser limits | Analytics — consent required |
Rejecting analytics does not prevent you from using the planner or purchasing a plan. “Reject analytics” and “Accept analytics” are both available on the first layer of the notice. You can reopen the notice at any time using Cookie Settings in the footer; withdrawing consent removes our analytics cookies and stops the analytics library from loading again.
5. Service Providers
We use a limited number of providers to operate Jet Lag Plan™:
- Vercel: website hosting, delivery and request-level security/operational data.
- Supabase: durable storage for saved plans, accounts, entitlements and related service records.
- Stripe: payment processing, checkout, subscriptions, fraud prevention and applicable tax handling.
- Resend: delivery of requested sign-in and service emails.
- Google Analytics: site-usage measurement only after analytics consent.
These providers process data under their own security and data-protection terms. Some processing may occur outside the UK or EEA; where required, transfers rely on recognised safeguards such as adequacy decisions or approved contractual clauses.
6. Retention and Security
We retain data only for as long as needed to provide the relevant feature, maintain security, resolve disputes and meet legal or accounting duties. Retention varies by record: short-lived sign-in tokens and rate limits expire automatically, while account entitlements and transaction records may be retained for the life of the account and any legally required period. We use access controls, signed tokens, restricted server credentials and encrypted connections to protect data, but no online service can guarantee absolute security.
7. Your Rights
Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal data; restrict or object to certain processing; and withdraw consent at any time. You may also complain to your local data-protection authority. In the UK, this is the Information Commissioner’s Office. Contact us at support@jetlagplan.com to exercise a right. We may need to verify your identity before responding.
8. Changes and Contact
We may update this policy when the service or applicable requirements change. Material changes will be highlighted on this page. For privacy questions, contact support@jetlagplan.com.