Current approach

FlightChangeCheck uses technology needed to operate and secure the website and, when configured, understand aggregate site usage through privacy-friendly analytics. The public service does not use customer accounts.

Essential technology

The private operations console uses a signed session cookie named fcc_ops_session. It is limited to the private /ops area, expires after eight hours, and is configured as HttpOnly, Secure in production, and SameSite Strict. Public customers do not use this cookie.

Cloudflare Turnstile may use strictly necessary browser or storage mechanisms to complete security checks. If Cloudflare pre-clearance is enabled in production, its additional cookie behavior must be documented here before launch. These mechanisms are not configured by FlightChangeCheck for behavioral advertising.

Analytics

Analytics is currently disabled. The site only initializes analytics when Plausible and a valid public site URL are configured.

Provider-specific privacy and consent language remains LEGAL_REVIEW_REQUIRED for the markets served.

Advertising

We do not use Meta Pixel, Google Ads remarketing, or cross-context behavioral advertising in v1. This statement must be rechecked against production network requests before launch.

Future changes

If future tools add advertising, remarketing, or personalization cookies, consent management will be implemented before they are enabled where legally required.

Contact

Questions may be sent to privacy@[DOMAIN]. Final provider-specific language is LEGAL_REVIEW_REQUIRED.