MilePilot.io is operated by Bang & Frank Ltd, a company registered in Finland. This Privacy Policy explains what information is collected when you use this website and how it is handled. By using MilePilot.io, you agree to the practices described below.
1. Who we are
MilePilot.io is a free airline loyalty miles calculator operated by Bang & Frank Ltd, registered in Finland. As a Finnish company we are subject to the EU General Data Protection Regulation (GDPR). We also comply with applicable US privacy laws, including the California Consumer Privacy Act (CCPA) where relevant.
2. What data we collect
Calculator usage
Calculator inputs — routes, booking classes, fare amounts, and programme selections — are processed entirely in your browser and are never transmitted to our servers. We do not collect or store any data related to your calculator usage.
Newsletter subscription
If you choose to subscribe to the MilePilot newsletter, we collect your email address. This is the only personal data we collect directly. Your email address is used solely to send you the newsletter and related updates — it is not sold, rented, or shared with third parties for marketing purposes.
Newsletter subscriptions are managed via Mailchimp (The Rocket Science Group LLC). By subscribing, your email address will be transferred to and stored on Mailchimp's servers in the United States. Mailchimp participates in the EU–US Data Privacy Framework. You can review Mailchimp's privacy practices at mailchimp.com/legal/privacy.
You can unsubscribe at any time by clicking the unsubscribe link included in every newsletter email.
3. Legal basis for processing (GDPR)
For EU/EEA residents, the legal basis for processing your email address is your explicit consent (Article 6(1)(a) GDPR), given at the point of subscription. You may withdraw consent at any time by unsubscribing — this does not affect the lawfulness of any processing carried out before withdrawal.
4. Cookies and local storage
MilePilot uses your browser's localStorage to cache airline and programme data fetched from our database. This cache (keys: milepilot_airtable_v1, milepilot_airports_v1) expires after one hour and contains only public programme data — no personal information. You can clear it at any time via your browser's developer tools or by clearing site data for milepilot.io.
We do not set first-party tracking cookies. Third-party services listed below may set their own cookies.
5. Third-party services
Google AdSense
MilePilot displays advertisements served by Google AdSense. Google may use cookies and similar technologies to show personalised ads based on your browsing history across other sites. Google's use of advertising cookies is governed by Google's Privacy Policy. You can opt out of personalised advertising via Google's Ad Settings or the YourAdChoices opt-out tool.
Mailchimp
Newsletter delivery is handled by Mailchimp (The Rocket Science Group LLC, USA). When you subscribe, your email address is stored on Mailchimp's servers in the United States. Mailchimp may also collect technical engagement data such as email open rates and link clicks. See Mailchimp's Privacy Policy for full details.
Airtable
Programme and airline data is fetched from Airtable via their API. No personal data is sent to Airtable during normal use of the calculator. See Airtable's Privacy Policy.
Amazon CloudFront / AWS
MilePilot is hosted on Amazon S3 and delivered via Amazon CloudFront. AWS may log standard server access data (IP addresses, browser type, referring URLs, timestamps) for security and operational purposes. This data is not used to identify individual visitors. See AWS's Privacy Policy.
6. Your rights
EU / EEA residents (GDPR)
You have the right to access, correct, delete, restrict, or port the personal data we hold about you, and to object to its processing. The only personal data we hold directly is your email address if you have subscribed to the newsletter. To exercise any of these rights, please use the contact options on the About page.
You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman: tietosuoja.fi.
California residents (CCPA)
California residents have the right to know what personal information is collected, to request its deletion, and to opt out of its sale. Bang & Frank Ltd does not sell personal information. To exercise your rights, please use the contact options on the About page.
7. International data transfers
Bang & Frank Ltd is based in Finland (EU). Newsletter subscriptions involve transferring your email address to Mailchimp's servers in the United States. This transfer is covered by Mailchimp's EU–US Data Privacy Framework certification and Standard Contractual Clauses where applicable.
8. Data retention
We retain your email address for as long as you remain subscribed to the newsletter. On unsubscribing, your data will be removed from our active mailing list. LocalStorage data persists in your own browser until cleared. AWS server logs are retained according to AWS's standard policies.
9. Children's privacy
MilePilot is not directed at children under the age of 13 (or 16 in certain EU member states). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of MilePilot after changes are posted constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or to exercise your data rights, please use the contact options listed on the About page.
Data Controller
Bang & Frank Ltd
Finland