Privacy policy

What this site is

Nonstop Scout publishes nonstop route information for U.S. airports. You do not need an account to use it. The only personal detail we ever ask for is an email address, and only if you choose to sign up for route alerts.

What we collect

We use Google Analytics 4 to understand how many people visit, which pages they read and which sites they arrive from. It sets cookies in your browser and sends Google your IP address (which Google truncates), your approximate location, the pages you view and basic device and browser details. We use it in aggregate; we do not try to identify individual visitors.

We show ads through Google AdSense. Google and its partners use cookies and similar technologies to serve ads and, where permitted, to personalise them based on your prior visits to this and other sites. Google's use of advertising cookies is described in its policy on how it uses data from sites that use its services.

Our server logs, run by Cloudflare, keep standard request records (IP address, user agent, the URL requested) for security and abuse prevention.

Route alert emails

Airport pages let you sign up to be emailed when that airport's nonstop list changes. If you do, we store the email address you give us, the airport you chose, and when you signed up, confirmed and (if you do) unsubscribed. To keep the form from being abused we also store your country and, for 30 days, one-way salted hashes of your IP address and of the email address used. We never store the IP address itself.

Signing up sends one confirmation email. You are not subscribed, and receive nothing further, unless you open the link in it and confirm. After that we email you only about route changes at the airports you picked. Every email has an unsubscribe link, and we stop as soon as you use it. If someone else entered your address, the confirmation email has a link that stops us emailing it again; to honor that we keep a salted hash of the address, not the address itself.

Two providers help run this. Resend delivers the emails, so it receives your address and the content of each message. Cloudflare Turnstile checks that the signup form is being used by a person; it runs only when you use the form and processes technical signals from your browser to do so. We use your address for these alerts and nothing else: no marketing lists, no sharing, no selling.

Nonstop Scout Pro

If you subscribe to Pro, Stripe processes the payment. Stripe receives your card details, name, email and billing address; we never see or store your card. We keep your email address, your Stripe customer and subscription IDs, your plan, and its status and renewal date, so we can turn Pro on and off and show you your account.

Signing in sends a one-time link to your email (through Resend). Once you use it we set one cookie, nss_pro, that keeps you signed in on that browser for up to 30 days; we store only a hash of it. Signing out deletes it. To stop the rate limits on the sign-in and checkout forms being abused we keep salted hashes of your IP address and email address, as for alerts.

In the iPhone app, the emailed link opens the app instead, and the app keeps a sign-in token on your phone for up to 180 days (we store only a hash of it). While you are signed in, push alerts on that phone are linked to your Pro account so they cover every saved airport. Signing out in the app deletes the token and unlinks the phone.

Push alerts in the iPhone app

If you turn on alerts in the Nonstop Scout app, we store the push token Apple and Expo assign to your phone and the airport codes saved in the app, so we can notify you when one of them gets a new nonstop. We do not collect your name, email or location for this. Push alerts are delivered through Expo (expo.dev) and Apple. Turn them off in the app's Saved tab or in your iPhone's Settings; when you turn them off, we stop sending immediately.

What we do not do

We do not sell your data. We do not share it with anyone beyond the providers named on this page. We do not add you to any email list you did not ask for.

Links out to flight search, hotels and activities

Route pages link to third-party flight search, and to hotel and activity partners for the destination — currently Hotels.com, Booking.com and GetYourGuide. The hotel and activity links are affiliate links: if you book after following one, the partner may pay us a commission, at no extra cost to you. To attribute that, the partner sets a cookie in your browser when you arrive on its site. On our side we record only the route and the partner that was clicked, never who clicked. Once you follow a link you are on another company's site, under its privacy policy, not ours.

Your choices

• Opt out of Google Analytics with Google's browser add-on.
• Turn off personalised advertising in Google My Ad Center.
• Block or clear cookies in your browser settings — the site works without them.
• Stop route alerts with the unsubscribe link in any alert email. To have your address deleted from our records entirely, write to the contact address below.

If you are in the EEA, the UK or Switzerland, you have rights of access, correction, deletion and objection over personal data relating to you. For route alerts, that is the email address and signup record described above, and you can exercise those rights by writing to us. For the analytics and advertising data, requests are best directed to Google, which is the controller for it.

Children

This site is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes we will update the date at the top of this page.

Contact

Questions about this policy can be sent to privacy@nonstopscout.com.