Privacy policy
How we collect, use, and protect your data.
Introduction
At 2LNR, operated by Interline, Inc. ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Services").
Quick summary
We collect
- Account information
- Flight search data
- Usage analytics
- Phone number (for SMS)
- Payment information via Stripe
We never
- Sell your personal data
- Share personal data with airlines
- Store your payment card details (handled by Stripe)
Information We Collect
1. Account Information
- Email address
- Authentication credentials (managed securely via Google Firebase Authentication)
- Name (optional)
- Home airport preference
- Phone number (optional, for SMS notifications)
2. Flight and Upgrade Data
- Flight upgrade availability searches and filters
- Saved routes and alert preferences
- Seat and cabin class preferences
3. Usage Data
- IP addresses
- Browser type
- Pages visited
- Features used
- Time spent on platform
4. Payment Information
Payment processing is handled securely by Stripe. We never store your full credit card information on our servers.
5. Location Data
When you first use the Services, we may use your IP address to determine your approximate geographic location in order to suggest nearby airports. This lookup is performed via a third-party geolocation service and the location data is not stored in your account.
6. Linked Email Accounts
You may choose to link your email account (Google, Microsoft, or Yahoo) to 2LNR via OAuth to enable trip detection and itinerary features. When you do, we store:
- An OAuth access token and refresh token for the linked provider
- The email address associated with the linked account
We access only the data necessary to identify flight booking confirmations. You can unlink your account at any time from your settings, which deletes the stored tokens.
7. Analytics and Tracking
We use the following third-party analytics services to understand how our Services are used and to improve your experience:
- Amplitude — product analytics to understand feature usage and improve the user experience. Amplitude Privacy Policy
- Google Analytics — website traffic analysis including page views, referral sources, and general usage patterns. You can disable analytics cookies at any time using the "Cookie Preferences" link in the footer
- Microsoft Clarity — session replay and heatmap analysis to understand how users interact with our interface. Clarity records mouse movements, clicks, and scrolling behavior but masks sensitive input fields. Microsoft Privacy Statement
- Firebase Analytics & Crashlytics (mobile app) — usage analytics, crash reporting, and performance monitoring. Crash reports may include device model, OS version, and application state at the time of the error. Firebase Privacy Information
- Intercom — in-app messaging and customer support. Intercom receives your user ID and email address to provide personalized support and enable live chat. Intercom Privacy Policy
These services may set their own cookies or collect device identifiers. You can manage your analytics preferences at any time using the "Cookie Preferences" link in the footer or the "Do Not Sell or Share My Personal Information" link. Analytics cookies are only loaded with your consent.
How We Use Your Information
We use your information to:
- Provide and improve our Services
- Process your subscription payments
- Send notifications about product features, such as upgrade availability
- Analyze and enhance service performance
- Communicate about service updates and features
Lawful Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following lawful bases under GDPR Article 6:
| Data Category | Purpose | Lawful Basis |
|---|---|---|
| Account Information | Service delivery, authentication | Contractual Necessity (Art. 6(1)(b)) |
| Payment Processing | Subscription billing | Contractual Necessity (Art. 6(1)(b)) |
| Flight Upgrade Monitoring | Core product functionality | Contractual Necessity (Art. 6(1)(b)) |
| Analytics & Behavioral Tracking | Product improvement, UX optimization | Consent (Art. 6(1)(a)) |
| Security & Fraud Prevention | Platform integrity, abuse prevention | Legitimate Interest (Art. 6(1)(f)) |
| Service Communications | Account notifications, alerts | Contractual Necessity (Art. 6(1)(b)) |
Where we rely on consent, you have the right to withdraw it at any time by adjusting your Cookie Preferences in the footer. Where we rely on legitimate interest, you have the right to object by contacting us at support@2lnr.com.
Data Sharing and Disclosure
We share your information in the following limited circumstances:
- With service providers who assist in operating our platform
- When required by law or to protect our rights
- In the event of a business transaction (e.g., merger or acquisition)
Data Security
We implement appropriate technical and organizational security measures to protect your information, including:
- Encryption of sensitive data
- Regular security assessments
- Access controls and authentication
- Secure data backups
Your Privacy Rights
You have the right to:
- Access your personal information
- Correct inaccurate data
- Request deletion of your data
- Opt-out of marketing communications
Data Retention
We retain your information as follows:
- Account information: While your account is active plus 2 years after deletion
- Usage logs: 2 years
- Payment records: As required by law
Cookie Policy
Essential Cookies
These cookies are required for the Services to function and cannot be disabled:
- Session cookie — keeps you signed in
- CSRF token — protects against cross-site request forgery
- Cookie consent preference — remembers your analytics choice
Analytics Cookies (Optional)
These cookies are only set if you accept them via the consent banner shown on your first visit. They help us understand how the Services are used:
- Google Analytics — page views and traffic patterns
- Amplitude — product usage and feature analytics
- Microsoft Clarity — session replay and heatmaps
- Intercom — in-app messaging and support
You can change your preference at any time using the "Cookie Preferences" link in the footer.
Children's Privacy
Our Services are not intended for anyone under 18. We do not knowingly collect information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete it.
International Data Transfers
We process data in the United States. By using our Services, you consent to the transfer of your information to the United States.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of any material changes via email or through our Services.
Contact Us
For privacy-related questions or concerns, contact us at:
Interline, Inc.Email: support@2lnr.com
California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) provides you with the following rights:
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the categories of third parties with whom we have shared it
- Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions permitted by law
- Right to Correct: You may request that we correct inaccurate personal information we maintain about you
- Right to Opt-Out of Sale and Sharing: We do not sell your personal information for direct monetary compensation. However, under the CPRA's expanded definition of "sharing," our use of certain third-party analytics integrations (such as Amplitude and Microsoft Clarity) may constitute the "sharing" of personal information for cross-context behavioral advertising purposes. You can opt out of this sharing at any time by clicking the "Do Not Sell or Share My Personal Information" link in the footer or by adjusting your Cookie Preferences
- Right to Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes beyond what is necessary to provide the Services
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights
To exercise any of these rights, please contact us at support@2lnr.com. We will verify your identity before processing your request and respond within 45 days as required by law.
Notice to Texas Residents
If you are a Texas resident, the Texas Data Privacy and Security Act (TDPSA) provides you with certain rights regarding your personal data, including the right to:
- Access the personal data we have collected about you
- Correct inaccuracies in your personal data
- Delete personal data you have provided to us
- Obtain a portable copy of your personal data
- Opt out of the processing of personal data for targeted advertising
We will respond to verified consumer requests within 45 days of receipt. If we require additional time to process your request, we will notify you of the extension and the reason within the initial 45-day period.
Appeals process: If we decline to take action on your request, you may appeal our decision by emailing support@2lnr.com with the subject line "Privacy Appeal." We will respond to your appeal within 60 days. If you are not satisfied with the outcome of your appeal, you may contact the Texas Attorney General to file a complaint.