Your plans.
Your shortlist.
MacL operates this free Flight Finder preview. Account and cloud services await hosted setup; payments and live supplier search are not enabled.
Local comparison data
Manually entered flight quotes are processed in your browser. Choosing “Save on this device” puts one list in browser local storage, including traveler ages, travel dates, fare sources, notes and quoted prices. It is accessible to anyone using the same browser profile and is not an encrypted cloud backup. Use “Delete saved list” or clear the site’s browser data to remove it. The currently open list remains in memory until closed or replaced.
Account and cloud data
When configured, Supabase processes account email, sign-in sessions and the single list you explicitly save, including ages, travel dates, notes and quotes. Session credentials are stored in this browser so it can keep you signed in. Row ownership and current server sessions restrict access. You can download or delete the cloud list from the workspace. Account also offers an archive of your basic profile, stored list and removal preparation. It excludes credentials, Auth metadata/audit records, device copies, unsaved work, infrastructure logs/backups and external-provider data. The latest reversible removal-preparation record is retained until the account is removed; there is no automatic deletion schedule. Preparing pauses cloud changes, and cancellation restores them. Permanent account deletion requires its separate reviewed hosted service and explicit confirmation. Once enabled, a permanent request blocks cloud access, deletes the login and its cloud list, and supplies a private recovery receipt. Completed receipts contain no account identity and expire after seven days; uncompleted jobs remain for operator recovery. Deletion clears its content and retains an empty revision marker; it does not delete your login, downloaded files, device copies, hosting logs or backups. Hosted account deletion and comprehensive data-request fulfillment require acceptance before wider release. Sign out before leaving a shared browser.
Exports
JSON backups and CSV exports are files on your device. Browser-data removal does not delete downloaded files. Store and share exports carefully; they can reveal travel plans. Do not enter passport details, payment card information or account passwords in notes.
Website requests
Vercel serves the site and can process IP addresses and operational request details. The app loads its airport suggestions from its own static files and checks a same-origin service-status endpoint. There are no advertising or analytics SDKs. External quote and documentation links are opened only when you select them and have their own policies.
When supplier search is enabled
The prepared search service sends airports, dates, passenger types/ages and cabin preferences to Duffel. It does not request passenger names. Server-side cost limits use a daily keyed hash of the connection IP, kept in short-lived quota counters for up to 48 hours, plus aggregate totals. Raw IP addresses are not stored by that quota code; normal hosting logs are separate. This path is disabled in the current preview and needs integration and privacy acceptance before launch.
Questions and controls
Theme preference is stored on this device when browser storage is available. You may use the comparison without persistent storage. Contact MacL through macl.app for questions. Hosted account/privacy acceptance and log/backup retention must be completed before broader release. Purchases remain unavailable.