Privacy Policy

1. About this policy

MeetMyMatesAbroad is a personal hobby project.

This Privacy Policy explains how we collect, use, store and share personal data when you use meetmymatesabroad.com and its associated services (the “Service”).

We aim to collect only the information needed to provide the Service. We do not sell personal data and do not use account email addresses for advertising, newsletters or promotional messages.

For questions or requests concerning your personal data, contact: support@meetmymatesabroad.com

2. Who may use the Service

The Service is intended only for people aged 18 or older. We do not knowingly collect personal data from anyone under 18.

If we learn that an account belongs to someone under 18, we may close the account and delete its associated personal data.

3. Personal data we collect

Account and authentication information

When you create or use an account, we process:

• your email address;
• your username;
• authentication credentials, tokens and account identifiers; and
• account creation, login and security information.

Authentication is provided through Supabase. Passwords, where used, are handled through Supabase’s authentication systems and are not available to us in readable form.

We use your email address only to create and secure your account, authenticate you, recover access, and send essential administrative or security messages.

Saved searches and trips

When you search for or save a trip, we process information such as:

• search queries;
• locations;
• travel dates;
• saved-search records; and
• the usernames of friends connected with or invited to a trip.

A saved trip consists of the saved search information needed to display it again. We do not collect payment details, process travel bookings or store flight-booking details.

Friends, invitations and sharing

When you invite another user or share a trip, we process:

• your username;
• the other user’s username;
• the connection or invitation between the accounts; and
• which saved searches or trips have been shared and with whom.

Your username and information from a shared trip may be visible to users with whom you choose to connect or share it.

Users cannot publish public posts or send private messages through the Service. Please share trip information only with people you trust.

Technical and security information

Our infrastructure providers may automatically process limited technical information when you access the Service, including:

• IP address;
• browser, device and operating-system information;
• request timestamps;
• pages or routes requested;
• authentication and security events; and
• diagnostic or error information.

We use this information to deliver the website, keep accounts secure, prevent abuse, investigate technical problems and maintain the Service.

Analytics information

We currently use Vercel Web Analytics to understand general usage patterns. Depending on its configuration, this may include aggregated information about page views, approximate location, referring pages, browser, operating system and device type.

We do not intentionally include email addresses, usernames, saved searches or other account identifiers in analytics events.

We do not currently use Google Analytics. If we introduce Google Analytics or another analytics service that requires consent, we will update this policy and request consent before using non-essential cookies or similar technologies where required by law.

Support communications

If you contact support, we process your email address and the contents of your correspondence so that we can respond and maintain a record of the request.

4. Why we process personal data

Providing the Service

We process account information, saved searches, trip information, friend connections and sharing information because this is necessary to provide the Service you request and perform our contract with you.

This processing is based on Article 6(1)(b) GDPR.

Security and operation

We process technical logs and security information to protect users, prevent misuse, diagnose errors and maintain the reliability of the Service.

This processing is based on our legitimate interests under Article 6(1)(f) GDPR. Our legitimate interests are operating a secure, functional and abuse-resistant service.

Analytics and improvement

We use privacy-focused, aggregated analytics to understand how the Service is used and improve its design and performance.

To the extent this involves personal data, the processing is based on our legitimate interests under Article 6(1)(f) GDPR. We do not use analytics information to create advertising profiles.

Support

We process support communications as necessary to provide requested support and, where applicable, based on our legitimate interest in responding to questions and keeping appropriate records.

Legal obligations

We may process or retain information where necessary to comply with a legal obligation, respond to lawful requests, establish or defend legal claims, or protect the rights and safety of users and others.

This processing is based on Article 6(1)(c) GDPR or, where appropriate, our legitimate interests under Article 6(1)(f) GDPR.

5. When we share information

We do not sell or rent personal data.

We disclose information only where necessary to operate the Service, at your direction, or where required by law.

Service providers

We use the following service providers:

• Vercel provides website hosting, delivery infrastructure and aggregated website analytics.
• Supabase provides account authentication and database storage for saved search queries.
• Cloudflare provides domain registration, DNS and related network or security services.

These providers may process limited personal data on our behalf to deliver their services. Their processing is governed by their contracts and applicable data-protection obligations.

Ryanair API

The Service sends travel search parameters, such as locations and dates, to the Ryanair API to retrieve search results.

We do not intentionally send your email address, username, account identifier, friend list or saved-search record to Ryanair. Search parameters are submitted without information intended to identify your MeetMyMatesAbroad account.

Search results are provided for information only. MeetMyMatesAbroad is not affiliated with, sponsored by or endorsed by Ryanair.

Other users

Information is shared with another user when you deliberately connect with that user, invite them or share a trip with them.

Legal and safety disclosures

We may disclose information where reasonably necessary to:

• comply with applicable law or a binding legal request;
• protect the security or integrity of the Service;
• investigate fraud, abuse or unlawful activity;
• protect the rights or safety of users or others; or
• establish, exercise or defend legal claims.

Change of operation or ownership

If responsibility for operating the Service is transferred or reorganised, personal data may be transferred as part of that change.

Where required, we will notify affected users before their personal data becomes subject to materially different privacy practices.

6. International transfers

Vercel, Supabase and Cloudflare operate internationally. Their processing may therefore involve countries outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we use or require an appropriate transfer mechanism where legally necessary. This may include:

• an adequacy decision;
• an approved data-privacy framework;
• Standard Contractual Clauses adopted by the European Commission; or
• another safeguard recognised by applicable law.

You may contact us for further information about the safeguards relevant to your personal data.

7. Data retention and account deletion

We keep account information, saved search queries and sharing information while your account remains active.

When you delete your account:

• your account and saved searches are deleted from the active Service immediately or as soon as technically practicable;
• you will lose access to saved and shared trips;
• information may remain visible where another user has independently saved or recorded it;
• limited residual copies may remain temporarily in provider backups, security logs or technical systems until overwritten under the provider’s normal retention cycle; and
• we may retain limited information for longer where required by law, necessary to investigate abuse or security incidents, or needed to establish or defend legal claims.

We do not use backup copies for ordinary business purposes. They are retained only for recovery, security and continuity purposes until overwritten.

Support correspondence is retained only for as long as reasonably needed to address the request and maintain appropriate operational records.

Aggregated information that can no longer identify you may be retained for statistical purposes.

8. Cookies and browser storage

The Service may use cookies or browser storage that are strictly necessary to:

• keep you signed in;
• maintain account security;
• remember essential settings; and
• provide requested functionality.

Vercel Web Analytics is currently used as a privacy-focused analytics service and does not use third-party cookies to track users across different websites.

We do not currently use advertising cookies or Google Analytics.

If we later introduce non-essential cookies or comparable tracking technologies, we will provide appropriate information and request consent before using them where required.

9. Your data-protection rights

Depending on applicable law, you may have the right to:

• obtain information about how we process your personal data;
• request access to your personal data;
• correct inaccurate or incomplete personal data;
• request deletion of your personal data;
• restrict certain processing;
• object to processing based on legitimate interests;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a data-protection supervisory authority.

You may lodge a complaint with the authority in the country where you live or work or where you believe a GDPR infringement occurred.

If the Service is operated from Poland, the relevant supervisory authority is the Polish President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). You are not required to contact us before making a complaint.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

To exercise your rights, email support@meetmymatesabroad.com. We may ask for reasonable information to verify that the request relates to your account.

These rights are not absolute, and exemptions may apply under applicable law.

10. Security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse or alteration.

No internet-based service can guarantee complete security. You are responsible for protecting access to your email account and any credentials used to access MeetMyMatesAbroad.

Please contact support@meetmymatesabroad.com if you believe your account or personal data has been compromised.

11. Third-party services and links

The Service may display information obtained from third parties or link to third-party websites.

Those third parties operate under their own terms and privacy policies. We are not responsible for their independent collection or use of personal data after you leave our Service or interact directly with them.

12. Changes to this policy

We may update this Privacy Policy to reflect changes to the Service, our providers or applicable law.

We will update the date at the top of this policy when changes are made. If a change materially affects how we process account data, we will provide reasonable additional notice, such as through the Service or by email.

13. Contact

For privacy questions or requests, contact:
MeetMyMatesAbroad
Email: support@meetmymatesabroad.com

You can also review the Terms and Conditions.