Privacy Policy

Volcanic Unicorn Travel is operated by Volcanic Unicorn LLC (“we,” “us” or “our”). This policy covers our website, including volcanicunicorn.com and our hosted website, and messages sent to travel@volcanicunicorn.com. Other websites have their own privacy policies.

• Planning inputs: Points balances, passenger counts and planned bonuses entered in our tools are calculated in your browser. Our current tools do not send these balances to our server or connect to your bank or airline accounts. Inputs normally reset when the page reloads.
• Preferences and links: Your mileage valuation setting is saved in browser local storage. Selected routes, programs and filters may appear in page URLs; those URLs can be included in browser history, shared links and hosting request logs.
• Email: If you contact us, we receive your email address, name if provided, message, attachments and associated email metadata.
• Technical information: Hosting, security and access providers may process IP addresses, browser and device details, requested URLs, timestamps, referrers and error or security logs. Where the hosting platform requires sign-in, it also handles authentication and access information under its own policies.

We do not ask for bank logins, airline passwords, payment card numbers or Social Security numbers. Please do not send them.

• Run the planning tools and remember your valuation preference.
• Respond to questions, investigate corrections and evaluate partnership inquiries.
• Deliver and secure the site, diagnose errors and prevent misuse.
• Meet legal obligations and protect legal rights.

We do not use your entered points balances for advertising, credit decisions or account access. Public credit card offer checks are made by our server; those checks do not include your points balances or account credentials.

Our current application does not install advertising pixels or third-party analytics scripts. It saves the mileage valuation preference under vut-mile-value-usd in local storage until you change it or clear the site’s browser data. Local storage is different from a cookie.

Hosting and access services may use cookies or similar technology for authentication, security and operation. We do not control those services’ retention settings. Our application does not currently change its behavior in response to browser Do Not Track signals. It does not run cross-site behavioral advertising; third-party sites reached through links may have different practices.

Clear site data in your browser to remove the saved valuation. Blocking storage may prevent the setting from being remembered. Browser privacy controls can also limit cookies and tracking on external sites.

Information may be processed by providers supporting hosting, security, access control and email. Our hosting uses ChatGPT Sites and Cloudflare infrastructure. See OpenAI’s privacy policy and Cloudflare’s privacy policy for their practices.

We do not sell your email inquiries or planning inputs, or share them for cross-context behavioral advertising. We may disclose information when required by law, to protect rights and security, or in a business transfer subject to applicable privacy obligations.

Clicking a credit card referral, Expedia hotel link, Seats.aero referral or other external link takes you to a separate provider. The provider or referral network may receive the referral identifier, technical information and transaction attribution, and may use cookies to recognize a qualifying application, booking or subscription. We may receive commission or referral reporting, such as qualifying activity and rewards earned; we do not receive your full application, payment credentials or loyalty-account password through these links. See our Affiliate Disclosure.

You can use the tools without submitting an email inquiry, clear browser storage, and choose whether to follow external links. To request access to, correction of or deletion of information you have sent us, email travel@volcanicunicorn.com with “Privacy request” in the subject. We may need to verify the request using information proportionate to the request; do not email identity documents unless we arrange a secure method.

Depending on your location and applicable law, you may have additional rights, including a copy of your information, restriction or objection to processing, portability, withdrawal of consent where relied upon, or an appeal of a decision on your request. You may also contact your privacy regulator. We will handle requests as required by applicable law and will not discriminate for exercising protected rights. We cannot delete data controlled independently by external providers; contact them directly.

We keep correspondence for as long as reasonably needed to answer inquiries, maintain relevant business records, resolve disputes or meet legal obligations. Hosting and email providers apply their own log, backup and retention practices. We do not promise a fixed deletion period for records held by those providers.

We use reasonable safeguards appropriate to the information involved, but no internet transmission or storage system is completely secure. Providers may process information in the United States or other countries where they operate. Applicable legal protections may differ by location.

The site is intended for adults planning travel and rewards use. It is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has sent us personal information, contact us so we can review and delete it as appropriate.

We will update this policy when our practices change and revise the date above. Material changes will be identified on the site where appropriate. Questions: travel@volcanicunicorn.com.