← back to the tool
What happens to your data?
Most data stays on this device. Selected lookups and a few automatic AI checks send only what they need.
Privacy information reviewed on 31 July 2026.
Which data does the tool use?
The tool uses what you enter or upload: flight, contact, and letter details, evidence, messages, letters, and progress. Most data stays in this browser; there is no account or central claims database.
A selected address, flight, or AI step sends only what that step needs.
Controller, purpose, and legal basis
Who is responsible?
Freek Metsch (individual). Privacy questions? Via freekmetsch.com or email.
Why does the tool use this data?
The data is needed to build your EU261 claim, make fixed letters, perform lookup and AI steps, and keep progress locally. The legal basis is performance of the service you request (GDPR art. 6(1)(b)). Plausible receives general usage counts only, never your claim text or case file.
Which services may receive data?
Vercel hosts the site. OpenRouter and a model provider process AI steps; PDOK completes addresses; RapidAPI and AeroDataBox look up flights; Plausible counts general usage.
You can enter photos, messages, addresses, and flight details manually. The limited automatic comparison with a fixed list of tips cannot be switched off.
Vercel, OpenRouter, PDOK, flight services, and Plausible
- Vercel hosts the website and API functions in Frankfurt and processes technical request data. Form content, files, and AI answers are not written to application logs. See Vercel's privacy notice.
- OpenRouter and the selected model provider process only data for the AI step. You can enter photos and messages manually. The limited automatic tip check cannot be switched off. Requests exclude endpoints that collect user data, but technical metadata may be retained and zero retention is not guaranteed for every current endpoint. See OpenRouter's data-collection information.
- PDOK (the Dutch Cadastre) receives your postcode, house number, any addition, and IP address when completing an address. PDOK states that IP addresses may appear in logs. See the PDOK privacy notice.
- RapidAPI and AeroDataBox receive only flight number and date through the server. Your name, address, evidence, and letter content are not sent. Manual input remains available. See RapidAPI and the AeroDataBox API documentation.
- Plausible Analytics counts visits, pages, referrers, broad device and location data, and fixed categories after real actions without cookies. Never claim text, flight, airline, amount, or case ID. It briefly uses IP address and browser information for a daily identifier but does not store them raw. Plausible says visitor data stays in the EU. See Plausible's data policy.
Can data leave the EEA?
An AI request may pass through OpenRouter to a model provider outside the EEA. Location and retention vary by endpoint; zero retention is not guaranteed everywhere.
Manual input remains available for photos and messages.
Safeguards for international transfers
Vercel names the EU-US Data Privacy Framework and Standard Contractual Clauses as safeguards. AI location and retention vary by endpoint; zero retention is not guaranteed everywhere. The automatic tip check cannot be switched off. Transfers are subject to the GDPR rules for international transfers. PDOK is Dutch; Plausible says visitor data stays in the EU.
How long is data kept?
The automatic AI comparison stays in this browser for up to 24 hours. Letters are cleaned up after 30 days and status records after one year.
Other local data remains until you delete a case, evidence, or this site's browser data.
Local storage and technical request metadata
Text, status, and letters are stored in localStorage; evidence files in IndexedDB. The automatic AI comparison stays for up to 24 hours, letters for 30 days, and status records for one year. Other local data remains until you delete a case, evidence, form, or site data. Voluntary outcomes remain local only. Vercel and OpenRouter may retain technical metadata under their own terms; zero retention is not guaranteed for every current AI endpoint.
How can you delete data or use your rights?
You can inspect, change, and delete local data in the tool or through your browser's site-data controls.
Email for access, rectification, erasure, restriction, portability, or objection.
GDPR rights and the Dutch Data Protection Authority
Your rights
You can inspect, change, and delete local data in the tool or through your browser's site-data controls. Because there is no account or central claim file, vluchtclaimhulp normally has no claim record to retrieve for you. For questions about access, rectification, erasure, restriction, portability, or objection: email.
Supervisory authority
You can file a complaint with the Dutch Data Protection Authority (AP).