Privacy Policy

1. Who we are

FlySAF (flysaf.org) is provided by Climate Hero AB in partnership with We Don't Have Time. Climate Hero AB ("ClimateHero", "we") is the data controller and your contracting party for every purchase.

Climate Hero AB, org. no. 556815-2754, Sandhamnsgatan 30, 115 40 Stockholm, Sweden. Email: hello@climatehero.org.

2. What we collect and why

• Flight details (airports, trip type, seats) to calculate fuel use, emissions and price.
• Name, email and company name (if you buy as a company) to complete your purchase and issue your receipt and Certificate of Climate Contribution.
• Payment confirmation from Stripe. Card details go directly to Stripe and are never stored by us.
• Messages you send us so we can answer support questions.
• Technical and usage data (IP address, device, browser, page interactions) to keep the site secure and improve it.

You don't need an account to use FlySAF.

3. Legal basis

We process your data to perform our contract with you (calculation, purchase, receipt, certificate and support), to meet legal obligations (bookkeeping), and based on our legitimate interest (anonymised analytics, security, fraud prevention and showing our independent auditor that we buy at least as many climate credits as customers pay for).

4. Emails

We send emails that are needed for your purchase, such as your receipt and Certificate of Climate Contribution. We may also send a few follow-up emails about your purchase and the impact of your fuel switch. We won't send you newsletters and we promise not to flood your inbox. You can unsubscribe from follow-up emails at any time via the link in every email.

5. Sharing

We never sell your data. We share it only with providers that help us run FlySAF, such as Stripe (payments), Vercel (hosting), PostHog and Plausible (analytics) and Drip (emails), and with our auditor, accountants or authorities when required. Our partner We Don't Have Time does not receive any personal data about you. We may share aggregated figures with them, such as the total amount of SAF funded through FlySAF, which do not identify anyone.

Some providers are based in the US. Transfers outside the EU/EEA are protected by the EU-US Data Privacy Framework or the EU's Standard Contractual Clauses.

6. How long we keep data

Receipts and transaction records are kept for 7 years, as required by Swedish accounting law. Support messages and analytics data are kept only as long as needed for those purposes, and are then deleted or anonymised.

7. Cookies and similar technologies

FlySAF uses no cookies for analytics, advertising or tracking. Our analytics (PostHog and Plausible) work without cookies or anything else stored on your device. That's why you won't see a cookie banner.

We only store what the site needs to work:

• A technical cookie from Vercel, our hosting provider, that keeps your visit on one version of the site while we update it.
• Cookies from Stripe when you pay by card, which Stripe uses to prevent fraud. They are set only once you reach the payment step.
• Your choice of light or dark theme, saved in your browser so it stays the same on your next visit.

These are needed to provide the service you ask for, so they don't require consent. You can delete them at any time in your browser settings; the site still works, but your theme choice is forgotten.

8. Your rights

You can ask for a copy of the personal data we hold about you, or ask us to correct or delete it, limit how we use it, or object to processing based on our legitimate interest. Just email hello@climatehero.org and we'll reply within a month.

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.