Draft · not legally reviewed

Privacy Notice

This prototype notice explains what Bluebird currently stores, why it stores it, and which planned services are not connected.

What we collect

• For members: required email address, a salted password hash, account status, legal-document acceptance versions and times, opaque session-token hashes, and the profile choices you save.
• Profile choices may include home city, preferred gateway, travel limits, interests, airline/alliance and hotel-program priorities, generic membership/status tier, access needs, budget, and weekly-radar preference.
• Prototype feedback, messages, a random research-session identifier, and product events such as page, origin, mode, interest, or range changes.
• Limited abuse-prevention and diagnostic data such as country, referrer, browser user-agent, and a one-way login-attempt fingerprint.

What we do not ask you to store

Do not enter loyalty account numbers, passwords for another service, passport or identity documents, payment-card data, medical records, or booking credentials. Airline and hotel preferences use a fixed catalog, not account-number fields.

How information is used

We use member information to authenticate the test account, restore saved preferences, personalize rankings inside the same weather-verdict tier, secure the service, answer messages, and understand whether the prototype is useful. A profile never changes stored weather evidence or fabricates travel availability.

Storage and processors

Cloudflare Workers, D1, R2, and static hosting process and store the prototype. Passwords are transformed with salted PBKDF2 hashing before storage; session cookies contain an opaque token and the database stores only its hash. Open-Meteo supplies forecast data and does not receive member profile data from this account flow.

Email boundary

Email verification, password recovery, and weekly delivery are not configured. The account page states this explicitly. Saving a weekly-radar preference does not schedule or send email.

Retention, deletion, and choices

You may use the public featured-city forecast without an account. A signed-in member can delete the test account from the member page; this removes the member, saved profile, member sessions, and recorded legal acceptances. You may also request deletion of feedback or messages through Contact. Aggregated counts and non-personal forecast evidence may remain.

Security and limits

We use access controls, same-origin checks, secure HttpOnly cookies, rate limits, and input validation, but no internet service can promise absolute security. This prototype is not ready for sensitive personal records or production membership until identity, email delivery, operational monitoring, and legal review are complete.

Contact

Send privacy questions or deletion requests through the monitored contact form.