Privacy Policy
Last updated: September 25, 2026
1. Overview
Same Arrival (“we,” “our,” or “us”) helps groups search, compare, and arrange travel. This Policy describes the personal information we collect, why we use it, when it may be shared, and your privacy choices and rights.
2. Information We Collect
Information you provide
Depending on how you use Same Arrival, you may provide travel details (such as traveler names, airports, dates, and preferences), passenger and contact details, and information needed to process a booking or payment. We also receive information when you contact us or subscribe to updates.
Payment providers handle payment card details. We may receive transaction and payment-status information, but not your full card number. If you subscribe to updates, we use your contact details to manage that subscription. We do not sell your contact details or provide them to other companies for their own marketing.
Information collected automatically
- Technical information such as IP address, device, browser, usage, and diagnostic information
- Information collected by analytics tools, only if you consent
- Anonymous, cookie-free counts of booking steps (for example, searches, checkouts started, and bookings completed), stored without identifiers or contact details
Shared booking links
A link you choose to share for trip planning may reveal information about the trip and travelers to anyone who has the link. Share such links only with people you trust.
Links associated with a booking may let recipients view booking details or continue a payment. Treat them as confidential and share them only with intended recipients.
3. How We Use Your Information
- To provide requested travel searches and coordinate travel
- To arrange tickets, process payments, and provide related support
- To operate, secure, and improve the Service
- To send optional marketing communications where you have consented
- To measure site usage when you have consented to analytics
We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Marketing Communications & Contact Consent
What we ask for at checkout
At checkout, you can choose whether we may use the traveler’s contact details for optional marketing communications. This choice is separate from booking-related communications and does not affect your ability to purchase a ticket or the price.
- If you opt in, we may use the contact details you provide for marketing communications about Same Arrival and travel.
- If you opt out, we do not use those details for marketing. We may still use them to process and support your booking.
Your confirmation of ownership and authority
Only provide contact details that you are authorized to use. If you consent on another person’s behalf, you must have their permission.
Marketing consent is optional and is not a condition of purchase.
Withdrawing consent
You can withdraw marketing consent at any time by using the instructions in a marketing communication or contacting us through the Contact page. This does not affect processing carried out before withdrawal.
Legal basis and retention
Where applicable law requires a legal basis, we rely on your consent for optional marketing and analytics, on steps needed to provide requested services, and on legitimate interests or legal obligations for security and recordkeeping.
We do not sell or rent your email address or phone number, and we do not share them with third parties for their own marketing.
5. Third-Party Services
We share information with service providers as needed to operate Same Arrival, process transactions, and provide requested travel services. These providers may include:
- Flight service providers — provide flight search and ticketing services. A provider may receive information needed to deliver the service you request. See Amadeus’s privacy policy and Duffel’s privacy policy.
- Payment providers, including Stripe — process payments and related transaction information. See Stripe’s privacy policy.
- Analytics providers, including Google Analytics — may collect usage information if you consent. See Google’s privacy policy.
- Authentication and security providers — help protect access to and operation of the Service.
- Vercel — hosts the application. See Vercel’s privacy policy.
6. Cookies & Tracking Technologies
We use browser storage to provide requested features and remember your privacy choice. Optional analytics technologies are used only with your consent. Separately, we count booking steps on our own servers without cookies, identifiers, or contact details so we can find and fix points where bookings fail. We do not use advertising cookies for cross-site behavioral advertising.
7. Your Cookie Choices & Consent
You can accept or reject optional analytics, or manage your preferences. Analytics is enabled only after you consent.
Your choice is remembered by your browser and can be changed at any time using the Cookie Preferences link in the footer.
8. Your Rights Under GDPR (EU/EEA/UK Users)
Depending on your location, applicable law may give you the right to:
- Access, correct, or delete personal data we hold about you
- Withdraw consent at any time
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Lodge a complaint with your local data protection authority
9. Your Rights Under CCPA/CPRA (California/US Users)
We do not sell personal information or share it for cross-context behavioral advertising. Depending on applicable law, you may have the right to:
- Know what personal information is collected and how it is used
- Opt out of sale or sharing of personal information
- Correct inaccurate personal information
- Request deletion of personal information we hold
- Not be discriminated against for exercising these rights
You can change your analytics choice using Cookie Preferences. For other privacy requests, use our Contact page.
10. Data Retention
We keep technical and diagnostic information only as long as reasonably needed for security, service operation, and troubleshooting, subject to provider retention practices.
Booking and transaction records are retained as needed to provide the Service, meet legal and accounting obligations, resolve disputes, and prevent fraud. Marketing contact details are retained until you withdraw consent or request deletion.
Analytics providers retain information under their own policies.
11. Children’s Privacy
Same Arrival is intended for adults. An adult arranging travel for a child may provide the child’s passenger details when needed for a booking and is responsible for having authority to provide them.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of Same Arrival after changes are posted constitutes acceptance of the updated policy.
13. Contact
For privacy questions or requests, visit our Contact page.