Privacy Policy

This Privacy Policy explains how Heathrow Helper ("we", "the service") handles your information when you use this website.

1. What we collect

• Chat messages you send. Each message is sent to our server in order to generate a reply. Messages are processed in memory to match intent and are not written to a persistent database.
• Standard server logs. Our hosting provider (Render) and our CDN (Cloudflare) automatically record technical metadata such as IP address, request time, user agent and referrer for the purpose of operating, securing and debugging the service. Typical retention is 14-30 days.
• Local-storage chat history. Recent messages and replies may be stored in your browser's local storage on your device, only to restore the conversation if you reload the page. This data is never transmitted to us and you can clear it at any time by clearing your browser data.

2. What we do not collect

• We do not require account creation, sign-in, or any personal identifiers.
• We do not use third-party analytics, advertising trackers, or fingerprinting scripts.
• We do not sell, share or rent your data to third parties.

3. Third-party services

To answer your questions the service contacts the following third parties:

• Heathrow Airport's public APIs (api-dp-prod.dp.heathrow.com) — flight, security and immigration wait data.
• AviationStack (api.aviationstack.com) — fallback flight data for non-LHR routes.
• Google Translate (via the open-source deep-translator library) — optional translation of replies into your detected language. Only the message text is transmitted.
• Google Fonts (fonts.googleapis.com) — for the Inter font used on this site.
• jsDelivr CDN — to load the markdown rendering libraries used in the chat.

These services have their own privacy policies; we recommend you review them if you are concerned.

4. Cookies

We do not set any tracking cookies. Cloudflare may set a small number of strictly-necessary cookies to provide security and routing.

5. Your rights (UK / EU)

Because we do not store personal data beyond short-lived hosting logs, there is generally no profile to access, correct, or delete. If you have a specific concern (for example you believe your IP address appears in our logs for a security investigation), contact us via the contact page and we will respond within 30 days.

6. Children

This service is not directed at children under 13 and we do not knowingly collect data from them.

7. Changes

We may update this policy occasionally. The "Last updated" date above will reflect any change.