Privacy Policy — Travel Waivers
The short version
This app does not collect information about individual Reddit users or their activity.
It posts airline travel-waiver notices to a subreddit. It reads no user profiles, records no views, tracks no clicks, and sends nothing about Reddit users to the operator’s backend. If you read one of its posts, the app does not know you did.
What the app is
Travel Waivers is an automated posting tool. When an airline issues a travel waiver, a notice that passengers on certain routes may change flights without a fee, the operator’s backend prepares the announcement, and this app publishes it to the subreddit where a moderator has installed it.
The app performs no analysis of its own. It receives a title and a body, and turns them into an ordinary Reddit text post. The body is published exactly as the backend wrote it.
Information the app sends to the operator’s backend
The app contacts exactly one FlightSignal backend host, depending on which app is installed:
| App | Host |
|---|---|
travelwaivers |
api.flightsignal.net |
travelwaivers-dev (development only) |
api-dev.flightsignal.net |
It sends only what the backend needs to identify the installation requesting work and record the result, in three categories:
- Installation information — an identifier for the app installation, the subreddit name and its Reddit subreddit ID, and the app version. This is information about the community, not about any person.
- Publication information — identifiers and status information needed to record what the app published and whether publication succeeded.
- Operational information — execution status, a periodic liveness signal, and diagnostic information needed to operate and troubleshoot the service.
None of these categories contains Reddit user, profile, or voting data. Requests are authenticated and carry only the operational data described above; no Reddit credentials, cookies, or user identifiers are transmitted.
Information the app does not collect, store, or transmit
- No Reddit user data. The app does not collect usernames, user IDs, account age, karma, subscriptions, voting history, or saved or viewed content.
- No information about who reads, views, votes on, or comments on its posts. The app does not receive or request this information.
- No personal information about Reddit users. The app does not request or intentionally collect IP addresses, device identifiers, or location data about the people who see its posts.
- No advertising identifiers or behavioural tracking.
- No cookies or comparable browser storage used for identification.
The app does not collect information about individual Reddit users or their activity. That is the durable commitment and does not depend on which version is running.
Separately, as of this version, the app collects no aggregate performance data about its own posts: no scores, vote totals, comment counts, or view counts are read. If that changes in a future release, any such aggregate data would not include user identifiers, and this policy would be updated before that version is released.
A note on diagnostic information
Diagnostic error information may be reported when an operation fails so the operator can determine what went wrong. These messages describe operational or publication failures, such as a rate limit, rejected content, failed media operation, or another unsuccessful app action. The app does not intentionally include Reddit user information in diagnostic reports.
Information stored on Reddit’s infrastructure
The app is designed to use Reddit’s provided Redis storage as a non-authoritative operational cache, scoped to a single installation. It holds:
- local execution state used to guard against processing the same instruction more than once;
- the most recent revision number seen for a publication;
- a mapping from a Reddit post the app created back to the publication it announced, so that a deletion can be acted on.
It does not hold a copy of the post’s text. The post on Reddit is the only copy the app publishes. None of this identifies a person, and the operator’s backend remains the system of record and can rebuild this operational state if necessary.
Deleting a post
When a waiver post the app created is deleted on Reddit, the app is notified and responds in two steps:
- it tells the operator’s backend to delete its stored copy of the post’s text, and to cancel any work still outstanding for that post; and
- it deletes the operational cache entries described above for that post and its publication.
The backend is told first, because the mapping deleted in the second step is the only way the app can identify which publication a deleted post belonged to. If that request cannot be delivered, the mapping is kept so the attempt can be repeated rather than lost.
The request records who removed the post — its author, a moderator, or unknown. Reddit does not always tell an app which, and the app reports unknown in that case rather than guessing.
The map image a post links to is not deleted. It is an operational asset of the operator’s backend rather than a copy of a post: one map is commonly shared by several posts and by links published elsewhere, and it contains only airport locations derived from public travel-waiver data — no Reddit user information and no post content. Deleting a post erases the operator’s stored copy of that publication; it does not withdraw the shared map image, which remains available at its permanent address.
External services
The app communicates with Reddit as the hosting platform and with the applicable FlightSignal backend host identified above. It uses no advertising networks, third-party analytics services, or unrelated external APIs.
Links inside a post
The notices the app publishes contain ordinary Markdown links. Following one is a normal web navigation performed by the reader, in the reader’s own browser. The app is not involved, is not told that it happened, and receives nothing about the reader.
Where those links go is decided by the operator’s backend when it writes the notice, not by this app. As of this version they are:
| Destination | What it is | Whose site |
|---|---|---|
travelwaivers.ua1kgsmm.com |
The airline’s full list of current travel waivers. | United Airlines |
www.united.com/travelwaivers |
The airline’s own travel-waiver page. | United Airlines |
maps.flightsignal.net |
A map image of the airports a waiver affects. | The operator |
The first two are third-party sites. Their operators decide what they collect from a visitor, and their own privacy policies apply once a reader arrives — the operator of this app has no visibility into that and no control over it. The map link is served by the operator and is a plain image request; it carries no identifier for the reader and no information about which Reddit account followed it.
The app’s approved fetch domains govern what the APP may contact from Reddit’s servers. They are a separate matter from where a reader is sent, which is what this section describes.
Retention
Publication records and job outcomes are retained by the operator’s backend as an operational history of what was published and when. When a post is deleted on Reddit, the stored copy of its text is deleted from the backend as described above, and the app’s own operational cache entries for it are removed.
Moderator-configured settings
A subreddit moderator can set whether the app is enabled through Reddit’s app configuration screen. This setting is stored by Reddit as an app setting, not by the operator.
The app also uses a developer-set credential to authenticate to the operator’s backend. It is an application secret and contains no Reddit user information.
Children’s privacy
The app is not directed at children and does not intentionally collect information about individual Reddit users, including children.
Changes to this policy
Material changes will be reflected in this document and in the app’s listing. The Last updated date above marks the most recent revision.
Contact
Questions about this policy or the app’s data handling can be sent to support@flightsignal.net.