Informativa sulla privacy
Versione 2026-09-22, in vigore dal 22 settembre 2026
Who we are
Horvera (“we”) operates horvera.com, a passenger-rights information tool and document generator. We are the data controller for the personal data described here. Contact: privacy@horvera.com.
What we collect and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Flight details you enter (route, date, airline, disruption facts) | To evaluate your eligibility and show your result | Contract (providing the check) | 24 months, then anonymised |
| Anonymous session identifier (cookie) | To keep your check and claim available between page loads | Legitimate interest (running the service) | 180 days |
| Email address (only if you request a result email, buy a Claim Pack or sign in) | To send your result, documents, receipts and claim reminders | Contract | Until you delete your claim or account |
| Name, postal address, booking reference, passenger names, optional bank details (Claim Pack only) | To generate your personalised claim documents | Contract | Until you delete your claim; encrypted at rest |
| Airline correspondence you paste | To classify the airline’s reply and draft a response | Contract | Until you delete your claim; encrypted at rest |
| Payment records (amount, product, Stripe identifiers) | To process your purchase and comply with accounting law | Contract / legal obligation | 10 years (accounting) — card details are held by Stripe, never by us |
| Analytics events (page views, funnel steps, coarse properties such as jurisdiction or airline) | To understand how the product is used and improve it | Consent (cookie banner) | 12 months |
| Error logs | To keep the service working | Legitimate interest | 90 days |
We never sell personal data and never send your claim data to a claim-handling partner without your explicit consent — on the result page, or in your claim workspace if you later decide you would rather not deal with the airline yourself. You are told who the partner is, what they charge and exactly which facts would be shared before you agree to anything.
Processors
- Supabase (database, authentication, file storage) — EU region.
- Stripe (payments).
- Resend (transactional email).
- PostHog (analytics, EU servers) — only after consent.
- Sentry (error monitoring) — technical data with personal data scrubbed.
- Vercel (hosting).
Your rights
You can access, export, correct and delete your data at any time from your account (“Your data” page) or from any claim page (“Delete this claim”). You can also email privacy@horvera.com. You have the right to lodge a complaint with your supervisory authority.
Cookies
We use one strictly necessary cookie (session) and, with your consent, analytics cookies. See the Cookie settings page.
Automated decisions
Your eligibility result is produced by a deterministic rules engine that applies published regulations to the facts you enter. It is information, not a legal decision, and you can always contact the airline or an enforcement body directly.