Privacy

Who is responsible for your data. The controller is the owner of mergeodyssey.com (LowCost Europe) — see the “About & contact” page. For questions about personal data, write to hello@mergeodyssey.com.

What data we collect. Email address and/or Telegram ID, password hash, settings (airports, price, trip length, dream cities, language, time zone) and information about your plan and Telegram Stars payments — without payment details. We do not collect names, phone numbers or precise location.

Purposes and legal basis. Running your account and sending the deals you selected — performance of a contract (Art. 6(1)(b) GDPR); deal emails — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time; protection against hacking and spam — legitimate interest (Art. 6(1)(f) GDPR).

Who receives the data. Only processors without which the website cannot work: Cloudflare (hosting, database, Turnstile protection), Resend (email delivery) and Telegram (bot messages and Stars payments). Some of them may process data outside the EU on the basis of the EU Standard Contractual Clauses. We do not sell data or share it with advertisers.

Third-party resources. City photos are loaded from Wikimedia Commons — your browser connects to their servers. When you follow a “Buy” link, you go to the Aviasales (Travelpayouts) website, which operates under its own privacy policy and may set its own cookies.

Cookies. We use only a strictly necessary cookie to keep you signed in to your account and the browser’s local storage for your settings (airport, language). No advertising or analytics cookies, which is why there is no consent banner.

How long we keep data. For as long as your account exists. You can delete your account and all its data in your account area; sign-in sessions are deleted automatically after 30 days.

Your rights. You have the right to obtain a copy of your data, to rectify or erase it, to restrict or object to its processing, to withdraw your consent and to lodge a complaint with the data protection supervisory authority in your country.

🔒 Security: the site works only over a secure connection (HTTPS), passwords are stored only as an irreversible hash, forms are protected against bots (Cloudflare Turnstile) and password guessing, and after a password change all other sessions are closed. We will never ask you to send your password by email or message.

Your approximate city (by IP) is used once to suggest the nearest airport and is never stored.