Privacy Policy
Last updated 2026-10-05
Who is responsible
Prayag Shah (postal address available on request by email) is responsible for your personal data on F1 Travel. Contact: partnerships@formula1travelapp.com.
What we collect
- Account: name, email address and profile picture from Google sign-in.
- Trips: the races, itineraries, trip names and travel preferences you save.
- Bookings: booking details and confirmation references you add or that we create, such as flight numbers, hotel names and dates.
- Orders and payments: what you ordered, amounts and payment status. Card details go straight to Stripe; we never see your full card number.
- Travellers (flights): each traveller's name as on their passport, date of birth and gender, and a contact phone number, which we pass to the airline to book the flight. We don't collect passport numbers.
- Partner clicks: when you follow a partner link, which partner and link, so commissions can be attributed.
- Technical data: IP address and browser information in server logs, and rate-limiting counters.
How we use it
- To run your account and show your trips and bookings.
- To take payment, arrange bookings with suppliers on your behalf, and send confirmations, cancellations and refunds.
- To prevent fraud and abuse and keep the service secure.
- To meet legal, tax and accounting obligations.
We don’t sell your personal data, and we don’t use it for advertising.
Who we share it with
We use these service providers, each only for the purpose listed:
| Provider | Purpose | Data |
|---|---|---|
| Sign-in | Your name, email address and profile picture from your Google account | |
| Vercel | Hosting the website | Request data such as IP address and browser, in server logs |
| Supabase | Database hosting | Everything stored in your account (see above) |
| Stripe | Card payments | Card details (entered directly with Stripe), your email, order amounts |
| Resend | Sending emails | Your email address and the booking details in each email |
| Anthropic | Reading a booking confirmation you paste in, to fill in its details | The confirmation text you paste. It isn't stored by us |
| OpenAI | Optional AI trip summaries | The contents of the itinerary you ask to summarise |
| SerpApi | Flight and hotel search results | Search details (airports, dates, destination, number of guests); no account details |
| Google Fonts | Loading the icon font | Your IP address and browser, when the page loads the font |
| MapLibre demo tiles | Background map tiles on the hotel map | Your IP address and browser, when the map loads |
| Booking partners (e.g. Google Flights, Hotels.com, Viator) | When you choose “Book with partner” | You go to their site; they receive what you give them there under their own privacy policy |
When we book a ticket or experience for you, we pass the supplier the details it needs for the booking, such as the lead traveller’s name.
Cookies and local storage
We only use what the site needs to work. We don’t use advertising or analytics cookies, so there’s nothing to opt into.
| Name | Type | Purpose |
|---|---|---|
| next-auth.session-token, next-auth.csrf-token, next-auth.callback-url (prefixed __Secure-/__Host- on our live site) | Cookie | Keeps you signed in and protects sign-in forms. Strictly necessary. |
| __stripe_mid, __stripe_sid | Cookie (Stripe) | Set by Stripe on the payment page to prevent fraud. Strictly necessary for paying. |
| f1-order-items | Local storage | Your cart, kept on your device |
| race-filters-v2, f1-ticket-sort, f1-flight-sort, f1-flight-trip-type | Local storage | Remembers your filters and sort choices |
| f1-checkout-confirmation, f1-order-cart:*, f1travel:pendingDeletes | Session storage | Short-lived checkout and undo state, cleared when you close the tab |
How long we keep it
We keep your account data until you delete your account. We keep order and payment records for as long as tax and accounting rules require, 7 years. Server logs are kept for a short period by our hosting provider.
Your rights
You can ask to see, correct, export or delete your personal data, or object to how we use it, by emailing partnerships@formula1travelapp.com. To delete your account, see Delete your account. Depending on where you live, you may also be able to complain to your local data protection authority.
International transfers
Our providers may process data outside your country, including in the United States. We rely on their standard contractual protections for those transfers.
Changes
We’ll update this page when our practices change and show the new date at the top. Questions? See Contact.