Privacy Policy
Last updated: 16 October 2026
This policy explains what personal data we collect when you create a travel itinerary document, why we use it, how long we keep it and what you can ask us to do with it.
Who is responsible for your data
dummy flight tickets is the data controller for the personal data described here. For any question about this policy or your data, write to support@dummy-flight-ticket.com.
What data we collect
We collect only what is needed to produce your document:
- Details you type in the form: passenger title, first and last names, date of birth, and passport or travel document number.
- Your contact email address, used to send the document and any message about your order.
- The itinerary itself: airports, dates, flight numbers and the booking reference (PNR) generated for your document.
- Technical data needed to run the website, such as the time of your request and your IP address in our server logs.
Payments
Payments are processed by Stripe. Your card number, expiry date and security code are entered directly on Stripe’s secure payment page: they are never sent to us and never stored on our servers. Stripe only reports the result of the payment and a payment identifier back to us.
Why we use your data
We use your data only for the following purposes, based on the performance of our contract with you (creating and delivering your document), on our legal obligations (accounting records) and on our legitimate interest (keeping the service secure):
- To create your document and show it to you after payment.
- To email your document and the download link, and to answer your support requests.
- To keep a record of the sale for accounting and to handle refunds and disputes.
- To protect the service against abuse and to keep it working (server logs).
How long we keep it
Itineraries and the traveller details they contain are deleted automatically 7 days after they are created.
The download link we email you expires at the same time. After that, the document is no longer available and we cannot send it again.
Payment records are kept by Stripe and by us for as long as accounting law requires.
Server logs are kept for a short period for security purposes.
Who else can see your data
We do not sell your data and never share it for advertising. We share it only with the providers that make the service work, and who process it on our instructions:
- Stripe — payment processing.
- Our transactional email provider — sending your document and the download link.
- Our hosting provider — running the website and the servers that store your document for 7 days.
Some of these providers may store data outside the European Union; in that case the transfer is covered by appropriate safeguards such as the European Commission’s standard contractual clauses.
Your rights
Under the GDPR you can ask us at any time to:
- access the personal data we hold about you;
- correct data that is wrong;
- delete your data (you can also use the delete button on your itinerary page);
- restrict or object to processing, and receive your data in a portable format.
Email support@dummy-flight-ticket.com and we will answer within one month. You can also lodge a complaint with your national data protection authority (in France, the CNIL).
Security
We use HTTPS for all traffic, keep the document available for a short time only, and give access to personal data to as few people as possible. No system is perfectly secure, but we keep these measures under review.
Changes to this policy
We may update this policy. The current version is always published on this page with its last-updated date.