Privacy Policy

Last updated: August 24, 2026

Controller

The controller responsible for this website is:

Daystrom OÜ
Tornimäe tn 5, Kesklinn district
10145 Tallinn, Harju County, Estonia
Email: info@miles-hacking.de

Further company details are available in our Legal Notice.

Data we process

Website access and hosting

When you access the website, technically necessary connection and request data may be processed to deliver and secure the service. This can include IP address, request time, requested URL, referrer, user agent, and diagnostic information. Our hosting provider is Vercel Inc.

We process this data where necessary to provide a secure, reliable website and to protect our legitimate interests in operating it (Art. 6(1)(f) GDPR).

Newsletter signup

If you request email updates, we process your:

• email address;
• selected language;
• consent status and source;
• signup and verification timestamps; and
• subscription status;
• weekly and time-sensitive delivery preferences and their update timestamps;
• selected program or topic interests; and
• home-airport preferences, if you choose to provide them.

We use these optional preferences to select the delivery and topics you request. We use double opt-in: we send a verification message and activate marketing updates only after you confirm the address. The legal basis is your consent (Art. 6(1)(a) GDPR). You may withdraw it at any time with effect for the future.

Subscriber records are stored using Upstash Redis. Verification and other service emails are currently delivered using Maileroo. These providers process data on our behalf to provide their services.

Analytics and performance measurement

With your consent, we load Vercel Analytics and Vercel Speed Insights to understand visits and site performance. These services do not load until you accept the analytics category. The legal basis is your consent (Art. 6(1)(a) GDPR).

You can change or withdraw this consent at any time through Cookie Settings in the footer. Withdrawal does not affect processing that occurred before it.

Telegram bot

If you use our Telegram assistant during its controlled release, it accepts private one-to-one chats only. We process Telegram user and chat identifiers, language and voluntarily supplied preferences, conversation messages, usage/credit records retained by the bot account, and the technical data required to prevent duplicate processing. Technical storage uses purpose-bound pseudonymous identifiers and does not retain Telegram names or usernames. We use this information to provide the requested assistant features (Art. 6(1)(b) GDPR) and, where applicable, based on your consent.

Current answers are rendered deterministically from approved, sourced knowledge records. Messages are not sent to Anthropic or another external AI chat provider to generate those answers. If an external AI feature is separately activated in the future, we will gate it separately and disclose the provider, purpose, and relevant transfer information before use. Telegram receives and processes data under its own terms. Do not submit sensitive personal data or confidential information to the assistant.

Private deal notices are separate from question answering. They require an explicit alert opt-in and store separately protected consent, preference, and encrypted destination data. You can withdraw that consent independently without disabling the assistant.

Contact

If you contact us by email or through the contact form, we process your name (if supplied), email address, subject, and message to answer your request. The form relays the message through Maileroo to info@miles-hacking.de; tracking is disabled for this message. The legal basis is Art. 6(1)(b) GDPR when the request concerns a contract or pre-contractual matter, and otherwise our legitimate interest in responding and preventing abuse (Art. 6(1)(f) GDPR). Messages are deleted after the request is resolved unless a legal retention obligation applies.

Referral and affiliate links

Some links are referral or affiliate links. We may record a click event with the page, campaign, destination, language, and timestamp so that we can measure which placements are useful. The third-party destination processes your subsequent visit under its own privacy policy. We do not receive the information you enter in a card application from the issuer merely because you used our link.

Cookies and local storage

We use an essential consent cookie to remember your privacy choices. Optional analytics are disabled by default. Details are in our Cookie Policy.

Recipients and international transfers

Depending on the feature you use, data may currently be processed by Vercel, Upstash, Maileroo, and Telegram. Anthropic is not a recipient of messages handled by the current deterministic assistant. Some providers or their subprocessors may process data outside the European Economic Area. Where required, transfers are based on an adequacy decision, standard contractual clauses, or another lawful safeguard.

We do not sell your personal data.

Retention

We retain data only as long as needed for the stated purpose or a legal obligation:

• pending newsletter signups are deleted or reviewed periodically;
• verified subscriber data is retained until you unsubscribe, withdraw consent, or request deletion, subject to a minimal suppression record where needed to honor your opt-out;
• Telegram profile and conversation data is retained while the bot account is active or until deletion is requested, unless a shorter product retention period applies;
• consent records may be retained as evidence for the applicable limitation period; and
• security and operational logs are retained for a limited period appropriate to their purpose.

Your rights

Subject to the applicable conditions, you may request access, rectification, erasure, restriction, or portability of your data, object to processing based on legitimate interests, and withdraw consent at any time. You may also lodge a complaint with a data protection supervisory authority.

To exercise your rights, email info@miles-hacking.de. We may need to verify your identity before fulfilling a request.

Our lead supervisory authority may be the Estonian Data Protection Inspectorate: aki.ee .

Deterministic recommendations

The current Telegram assistant assembles general miles and card-related information deterministically from approved records and refuses unsupported questions. It does not make decisions that produce legal or similarly significant effects about you. Do not rely on an assistant response as financial, legal, or tax advice; verify current terms with the relevant provider.

Changes

We may update this policy when our services, providers, or legal obligations change. The date above shows the latest revision.