1. Introduction
NomadFast ("we", "our", or "us") operates the website nomadfa.st and the NomadFast Discord community. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
2. Information We Collect
Automatically Collected
- IP address (used to determine your approximate location for showing relevant flight prices; shared with Travelpayouts API for geo-detection)
- Browser type and version
- Pages visited and time spent
- Referring website
Account Information
- Email address (provided via Google OAuth sign-in)
- Google profile name and avatar (from Google OAuth)
User-Generated Content
- City reviews and ratings
- Feedback posts and comments (email is stored in masked form, e.g. "joh***@gmail.com")
- Departure airport subscriptions for deal alerts
- Subscription preferences (cities and countries of interest)
Discord Community Data
- Discord user ID and username (when using our Discord bot)
- Current city (when using the /moveto command)
- Meetup participation records
- City and country subscription preferences
Client-Side Storage
- Location preferences (city, airport code) stored in your browser's localStorage
- Theme preference (light/dark mode)
- Cookie consent status
3. How We Use Your Information
- Personalize flight prices and deals based on your location
- Monitor hot flight deals from your subscribed departure airports and send alerts via Discord DM
- Send periodic email communications including flight deal digests, travel recommendations, and service updates based on your destination preferences
- Display your reviews and feedback on the platform
- Manage your Discord community participation (meetups, city roles, deal alerts)
- Process subscription payments via LemonSqueezy
- Improve our website and services
4. Cookies and Local Storage
We use the following types of cookies and client-side storage:
- Essential cookies: Authentication session (Supabase auth), locale preference (NEXT_LOCALE)
- Functional storage: Location preferences, theme, cookie consent status (stored in localStorage)
We do not use analytics cookies or third-party tracking scripts. You can clear localStorage and cookies in your browser settings at any time.
5. Third-Party Services
We use the following third-party services that may process your data:
- Supabase (database and authentication): Stores your account and user-generated content. Servers in the US.
- Vercel (hosting): Processes web requests and server logs. Servers globally distributed.
- Google OAuth (authentication): Provides sign-in. Subject to Google's Privacy Policy.
- Travelpayouts / Aviasales (flight data): Your IP address is sent for location detection. Flight search clicks redirect to Aviasales.
- LemonSqueezy (payments): Processes subscription payments. We store order metadata but strip personal payment details (name, email, card info) from webhook logs.
- Discord (community): Bot interactions store your Discord ID, username, and city preferences in our database.
- Resend (email delivery): Delivers transactional and marketing emails. Your email address and name are shared with Resend for delivery purposes. Subject to Resend's Privacy Policy.
- Pexels (city images): No user data is shared with Pexels.
6. Email Communications
When you create an account, you may receive the following types of emails:
- Deal alerts: Flight deals matching your destination preferences (weekly digest)
- Service updates: Important changes to our platform or your account
- Travel recommendations: Personalized city and destination suggestions
You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any email, or by updating your preferences in your account settings. Service-related emails (e.g., password resets, account security) cannot be opted out of.
7. Affiliate Disclosure
NomadFast participates in affiliate programs including Travelpayouts (Aviasales), Airalo, Ekta, NordVPN, and others. When you click affiliate links and make a purchase, we may earn a commission at no additional cost to you. Affiliate links are marked with rel="sponsored". These links contain a site identifier (marker) but do not include any personal user information.
8. International Data Transfers
Your data may be transferred to and processed in the United States and other countries where our service providers operate (Supabase, Vercel, Discord, LemonSqueezy). By using our services, you consent to such transfers.
9. Data Retention
We retain your personal data only for as long as necessary to provide our services. Account data is retained until you request deletion. Departure airport subscription data and notification preferences are retained while your account is active. Discord community data is retained while you are a member of the Discord server.
10. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Withdraw consent for data processing
- Object to processing of your data
- Data portability (receive your data in a structured format)
To exercise any of these rights, please contact us at hello@nomadfa.st. We will respond within 30 days.
11. Children's Privacy
Our website is not intended for children under 16. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at hello@nomadfa.st.
