This English version is provided for information only. The German version is legally controlling.
Legally controlling German version: Datenschutzerklärung
Florian Hoffarth, hello@awardradar.app. Further details are available in the Imprint.
AwardRadar is hosted with Railway. The confirmed production region is currently EU West (Amsterdam, Netherlands). When the website and its interfaces are accessed, technically necessary access data may be processed, in particular the IP address, the date and time of access, the requested path, the status code, browser and device information, the referrer and similar technical metadata.
Railway may generate server and access logs. The exact log-retention period, the contractual classification, sub-processors and the applicable transfer mechanisms are still being reviewed with the provider and legally.
When you actively use AwardRadar, the application processes the search parameters you enter in order to provide flight-price, award and routing context. Depending on the function, these may include origin and destination, travel date, return date, trip type, cabin, filters, program selection and similar search parameters.
The airport autocomplete uses a request such as /api/airports?q=.... As a result, the entered search term may appear as a URL parameter in technical logs. Cash searches, award searches and hidden-opportunity/skiplag searches are sent to AwardRadar as request content and processed there on the server side.
For the actual evaluation, search parameters may be transmitted to external data providers to the extent necessary to deliver the respective function. AwardRadar does not create a user account or a personal travel profile in doing so. However, search data can allow conclusions to be drawn about travel interests and is therefore described transparently.
Individual technical results may be stored temporarily in memory or in temporary cache files in order to reduce repeated provider requests and to keep the application stable. This technical caching is to be distinguished from server logs and from storage by external providers.
The cache durations mentioned are current technical defaults and not guaranteed legal retention periods.
Local browser settings generally remain stored until you delete them, until the browser removes them or until AwardRadar changes the function. The retention periods of Railway and external providers are not yet conclusively confirmed and are not guaranteed on a blanket basis.
The following information describes the legal bases that are relevant from today's perspective. It represents a careful own assessment and is kept under ongoing review.
A separate legal basis applies to analytics and tag-management services; see the section “Consent, analytics and tag management”.
Depending on the function and technical configuration, AwardRadar may involve the following external services:
The providers are not necessarily used for every search. Which providers are involved depends on the search mode, technical configuration, availability and cache state. Provider-specific retention periods, sub-processors and international transfer mechanisms are still being reviewed.
AwardRadar may display links to external websites, for example to flight and booking sites, search providers, airlines or frequent-flyer programs. When you click such a link, you leave AwardRadar. The respective provider may then process its own access data, referrer information and, where applicable, travel data contained in the link, such as route or date.
AwardRadar uses local browser storage for functions that remain directly on your device:
awardradar_theme (localStorage) – display setting for light/dark mode.awardradar_text_size (localStorage) – text-size setting for better readability.awardradar_consent (localStorage) – your choice regarding necessary functions and optional analytics. You can change or withdraw this choice via “Privacy settings”.awardradar_saved_searches (localStorage) – optionally saved search parameters such as route, date, cabin, search mode and filters. This data remains in the browser, is not tied to a user account and can be deleted via the Saved Searches function.This browser data is not automatically linked to a server-side user account. You can delete it via your browser settings or the respective functions.
A legal distinction applies here: for any processing of personal data that results from these functions, the respective applicable legal basis under the GDPR applies. The storing of information on your device and access to it are additionally governed by Section 25 TDDDG. Necessary settings may rely on Section 25(2) TDDDG where its statutory requirements are met; storing or reading for analytics purposes requires your consent.
Google Tag Manager and Google Analytics are loaded in production only after your explicit consent to Analytics. Before your selection, analytics storage is disabled by default. Consent that has been given can be changed or withdrawn at any time via “Privacy settings”.
The legal basis for the analytical processing of personal data is your consent pursuant to Article 6(1)(a) GDPR. The storing of information on your device and access to it are assessed separately under Section 25 TDDDG. You can withdraw consent that has been given at any time with effect for the future; the lawfulness of the processing carried out before the withdrawal remains unaffected.
After consent, technical usage data such as page views, browser and device information, referrer, page URLs and event data may be processed. The exact processing of full URLs, query strings, referrers, IP-related data and events depends on the Google and Tag Manager configuration and is still being reviewed separately. Full anonymisation is not guaranteed here.
Analytics and tag-management services may set their own cookies or comparable technologies only once you agree to the “Analytics” category. Upon withdrawal, AwardRadar attempts to remove known analytics cookies in the browser.
AwardRadar is hosted with Railway in the EU West (Amsterdam, Netherlands) region. However, because individual external providers such as Google, SerpApi, Seats.aero, Travelpayouts or other internationally active service providers are involved, processing outside the EU or the EEA may still take place. The respectively applicable contractual safeguards, sub-processors and transfer mechanisms are being reviewed on a provider-specific and legal basis. This privacy notice makes no conclusive legal assessment in this regard.
Under the GDPR you have, in particular, rights to access, rectification, erasure and restriction of processing as well as, where applicable, to data portability. You also have the right, on grounds relating to your particular situation, to object at any time to processing that is based on Article 6(1)(f) GDPR (Article 21 GDPR). Where processing is based on your consent, you can withdraw it at any time with effect for the future pursuant to Article 7(3) GDPR; the lawfulness of the processing carried out before the withdrawal remains unaffected. You can also lodge a complaint with a competent data protection supervisory authority. Contact: hello@awardradar.app
This privacy notice may be updated if functions, providers or legal assessments change. Last updated: July 2026.