Skip to content

Privacy policy

This service collects less than is customary, because finding a holiday does not require knowing who you are. Below is the complete list of what we receive and why.

Last updated: September 2, 2026

This is a document stub. Before launch the text must be reviewed by a lawyer and completed with the details of the personal data operator.

1. What we collect

Account data: the identifier from the messenger or provider you signed in with, the name and username that came with it, your email address, interface language and referral code.

Price watches: the destinations, dates and budget you saved, and the alerts you created. We keep no separate search history — searches are never tied to an account. Anonymously, with nothing linking them to you, we do record searches that returned nothing, so we can see which destinations the catalogue is missing.

Support requests: your message, your email address and any attached files. We add your IP address, country, date and time, the page address and browser details — without them a problem usually cannot be diagnosed.

Technical data: IP address and request headers, needed to prevent abuse and to apply rate limits.

2. Why

To show search results and keep your favourites.

To deliver a price-drop notification to the channel you chose.

To tell a person apart from credential-stuffing and scraping.

3. Legal basis

Processing what the service needs to function rests on the agreement you accept by using it. Analytics is switched on only after you consent, and you can withdraw that consent at any time.

4. Storage and transfer

The primary database is hosted in the Russian Federation. Data leaves the country only when you choose a channel that does: if you ask for notifications in a messenger that transmits personal data to servers outside Russia, you give separate consent to that. This is why some sign-in methods are hidden for Russian IP addresses.

5. Retention

Support requests are kept for 180 days, sessions until you sign out or they expire, price history for as long as the charts need it, anonymous zero-result search records for 180 days. A deleted account is erased immediately; support correspondence is kept de-identified because it is the evidence that the erasure was carried out.

6. Your rights

Get a copy of everything we hold — one click, in your profile.

Delete your account and all associated data — also in your profile, with no correspondence.

Correct your data or withdraw consent to analytics.

7. Contact us

For anything about the processing of personal data, write to us through the “Write to us” form — it opens from any page. We reply within one working day.

This document describes how the service behaves today. If anything the service does differs from this text, that is a defect and we want to hear about it.

Privacy policy | TourScan