Privacy Policy

Who we are

AviaMango (aviamango.com) is a travel-deal discovery service run by a private individual in Lithuania — not a company. That person is responsible for (the "controller" of) the personal data described in this policy. For any privacy question, write to us through the contact form.

The short version

We keep data collection to a minimum. We run no advertising or analytics trackers, we don't build profiles of you, and we never sell your data. There are no user accounts — there is nothing to log in to.

Cookies we use

We use three first-party cookies and two local-storage entries, all strictly functional. They only remember choices you make so the site works the way you expect:

• am_origins — remembers the departure airports you select, so your results stay scoped to your region.
• am_locale — remembers your language choice (English or Lithuanian).
• am_adults — remembers how many adults you are booking for, so booking links open the provider's search for that many people.
• am_favorites (browser local storage, not a cookie) — keeps the cities and offers you add to favourites. It stays on your device and is never sent to our server; removing one or clearing your browser's site data deletes it.
• am_theme (browser local storage, not a cookie) — remembers light or dark mode if you choose one with the header button instead of following your device setting. It stays on your device and is never sent to our server.

Because these cookies are strictly necessary to provide the service you asked for, EU rules do not require a consent banner for them. We set no advertising, analytics or third-party tracking cookies of our own.

Location detection

To suggest sensible default departure airports and a default language, we estimate an approximate location from your IP address using a bundled, offline IP-to-city dataset (IP geolocation by DB-IP). This happens on our server as your page loads; we do not store your IP address for this purpose, and a location guess only ever affects the defaults you see.

You can change the suggested airports and language at any time — your explicit choice always overrides the guess.

Links to providers and affiliates

When you open a deal, you leave AviaMango for a third-party provider (for example Aviasales) to view and book. Some of these are affiliate links, which may carry a tracking marker so we can be credited for a referral. Once you are on the provider's site, their own privacy and cookie policies apply — not ours.

Contact form

If you write to us through the contact form, we receive your message, the email address you give (optional — only needed for a reply), the language of the page and the time you sent it. We use them only to read and answer your message.

Messages are kept with our database hosting provider and forwarded to our own inbox by an email delivery service; both act only on our instructions. Each message is deleted automatically 12 months after we receive it, or sooner if you ask. To stop abuse, we also keep a hashed (pseudonymised) form of your IP address for one hour; the address itself is never stored with your message.

Legal basis and your rights

Where the GDPR applies, our basis for the limited, transient processing above is our legitimate interest in providing a working, useful service — and, for a message you send us, our legitimate interest in answering it. You have the right to access, correct or erase your personal data and to object to processing. Because we hold no accounts and store no personal profiles, most requests are satisfied simply by clearing your browser cookies; a contact message is deleted on request.

To exercise any right, write to us through the contact form. You may also lodge a complaint with your national data protection authority (in Lithuania, the State Data Protection Inspectorate, VDAI).

Changes to this policy

We may update this policy as the service evolves. When we do, we'll revise the "last updated" date above.