Skip to Content
LegalPrivacy Policy

Privacy Policy

Last updated: July 16, 2026

Controller

The controller responsible for this website is:

Daystrom OÜ
Tornimäe tn 5, Kesklinn district
10145 Tallinn, Harju County, Estonia
Email: info@miles-hacking.de

Further company details are available in our Legal Notice.

Data we process

Website access and hosting

When you access the website, technically necessary connection and request data may be processed to deliver and secure the service. This can include IP address, request time, requested URL, referrer, user agent, and diagnostic information. Our hosting provider is Vercel Inc.

We process this data where necessary to provide a secure, reliable website and to protect our legitimate interests in operating it (Art. 6(1)(f) GDPR).

Newsletter signup

If you request email updates, we process your:

  • email address;
  • selected language;
  • consent status and source;
  • signup and verification timestamps; and
  • subscription status.

We use double opt-in: we send a verification message and activate marketing updates only after you confirm the address. The legal basis is your consent (Art. 6(1)(a) GDPR). You may withdraw it at any time with effect for the future.

Subscriber records are stored using Upstash Redis. Verification and other service emails are currently delivered using Maileroo. These providers process data on our behalf to provide their services.

Analytics and performance measurement

With your consent, we load Vercel Analytics and Vercel Speed Insights to understand visits and site performance. These services do not load until you accept the analytics category. The legal basis is your consent (Art. 6(1)(a) GDPR).

You can change or withdraw this consent at any time through Cookie Settings in the footer. Withdrawal does not affect processing that occurred before it.

Telegram bot

If you use our Telegram bot, we process the Telegram user and chat identifiers, language and voluntarily supplied preferences, conversation messages, usage/credit information, and the technical data required to prevent duplicate processing. We use this information to provide the requested bot features (Art. 6(1)(b) GDPR) and, where applicable, based on your consent.

Telegram receives and processes data under its own terms. Messages submitted to the AI chat may be sent to Anthropic for response generation. Do not submit sensitive personal data or confidential information to the bot.

Contact

If you contact us by email or through the contact form, we process your name (if supplied), email address, subject, and message to answer your request. The form relays the message through Maileroo to info@miles-hacking.de; tracking is disabled for this message. The legal basis is Art. 6(1)(b) GDPR when the request concerns a contract or pre-contractual matter, and otherwise our legitimate interest in responding and preventing abuse (Art. 6(1)(f) GDPR). Messages are deleted after the request is resolved unless a legal retention obligation applies.

Some links are referral or affiliate links. We may record a click event with the page, campaign, destination, language, and timestamp so that we can measure which placements are useful. The third-party destination processes your subsequent visit under its own privacy policy. We do not receive the information you enter in a card application from the issuer merely because you used our link.

Cookies and local storage

We use an essential consent cookie to remember your privacy choices. Optional analytics are disabled by default. Details are in our Cookie Policy.

Recipients and international transfers

Depending on the feature you use, data may be processed by Vercel, Upstash, Maileroo, Telegram, and Anthropic. Some providers or their subprocessors may process data outside the European Economic Area. Where required, transfers are based on an adequacy decision, standard contractual clauses, or another lawful safeguard.

We do not sell your personal data.

Retention

We retain data only as long as needed for the stated purpose or a legal obligation:

  • pending newsletter signups are deleted or reviewed periodically;
  • verified subscriber data is retained until you unsubscribe, withdraw consent, or request deletion, subject to a minimal suppression record where needed to honor your opt-out;
  • Telegram profile and conversation data is retained while the bot account is active or until deletion is requested, unless a shorter product retention period applies;
  • consent records may be retained as evidence for the applicable limitation period; and
  • security and operational logs are retained for a limited period appropriate to their purpose.

Your rights

Subject to the applicable conditions, you may request access, rectification, erasure, restriction, or portability of your data, object to processing based on legitimate interests, and withdraw consent at any time. You may also lodge a complaint with a data protection supervisory authority.

To exercise your rights, email info@miles-hacking.de. We may need to verify your identity before fulfilling a request.

Our lead supervisory authority may be the Estonian Data Protection Inspectorate: aki.ee .

Automated recommendations

The Telegram bot may use AI to generate general miles and card-related information. It does not make decisions that produce legal or similarly significant effects about you. Do not rely on an AI response as financial, legal, or tax advice; verify current terms with the relevant provider.

Changes

We may update this policy when our services, providers, or legal obligations change. The date above shows the latest revision.

Last updated on
Legal NoticeTerms of Use