Privacy Policy

Account & profile. Name, email, password (stored as a salted hash), travel preferences (home airport, cabin), and any traveler details you enter for bookings (names, dates of birth, contact numbers — required by airlines and hotels).

Money-related. Card payments are processed by Stripe — full card numbers never touch our servers. If you save a payout method for cashback withdrawals, we store those details securely and display only a masked label. Your cashback ledger (bookings, amounts, dates) is kept to compute and audit every dollar we owe you.

Usage. Searches, page views, and product events tied to your account and/or an anonymous device identifier (a cookie), used to run the funnel analytics that improve the product. We also use Google Analytics.

To operate the Service: run searches, complete bookings with travel suppliers, compute and pay cashback, watch prices you've asked us to watch, send the alerts and account emails you expect, prevent fraud, and improve the product. We send marketing only about planet.store itself, and alert emails can be turned off in Account settings.

Travel suppliers (airlines via Duffel, hotel systems via our hotel providers, car and cruise operators) receive the traveler details needed to fulfill a booking. Affiliate networks (for example Commission Junction) receive an anonymous click identifier so partners can attribute bookings and pay the commission that funds your cashback. Processors we rely on: Stripe (payments), Resend (email), Amazon Web Services (hosting), Google (analytics), and Anthropic (the AI that powers Planet AI search and support chat — it receives your queries, not your payment details). Each processes data only to provide their service to us. We disclose information if required by law, and we never sell it.

We use a session cookie to keep you signed in, a device identifier (ps_device) for anonymous analytics and free-search metering, and short-lived attribution cookies (ps_ref, ps_partner) when you arrive through a referral or partner link. Google Analytics sets its own cookies. Blocking cookies may limit sign-in and some features.

We keep account and ledger data while your account exists (money records are retained as long as needed for audit and legal obligations). Passwords are hashed, transport is encrypted (TLS), and databases are encrypted at rest. No system is perfectly secure — if a breach affects you, we'll notify you as the law requires.

You can edit your profile and preferences, change your email, toggle alert emails, and delete your account — all in Account settings. Deletion is permanent and removes your personal data from active systems (spend or withdraw your wallet first). Depending on where you live (for example, California or the EU), you may have additional rights to access, correct, or export your data — contact us via support chat and we'll honor applicable requests.

planet.store is not directed to children under 13 (under 16 in some regions) and we don't knowingly collect their data. We'll post any changes to this policy here with a new date; material changes will be flagged in the product.