Privacy policy
Last updated October 12, 2026
The short version: Dipt collects only what it needs to work. If you make an account, that's your email, a scrambled version of your password, and the trips you save. We don't sell your data, we don't show ads, and you can delete your account at any time.
Who we are
Dipt ("Dipt", "we", "us") runs the website you're on, a flight and stay search based in Connecticut, USA. Questions about this policy: support@dipttravel.com.
What we collect
If you create an account
- Your email address, to identify your account.
- Your password, scrambled. We store a one-way, salted hash (scrypt), never the password itself. We can't see or recover your password.
- Trips you save (the flight or stay details), so they show up on any device you log in from.
When you use Dipt
- Searches you run (places and dates) are used to show results. We don't keep a history of them.
- Partner link clicks. When you click "View deal" or "View stay", we record when, which partner site, and which part of Dipt it was clicked from, plus your account if you're logged in. This tells us which features help people find trips.
- Technical information your browser sends with every request, such as your IP address. We use it briefly to keep the site secure (for example, to limit repeated login attempts), and our hosting provider may keep it in standard server logs.
The trip assistant
When you chat with the assistant, your messages (and the conversation so far) are sent to Anthropic, the company whose AI model, Claude, writes the replies. Anthropic handles them under its commercial terms. Dipt doesn't store your conversations: they live in your browser tab and disappear when you start a new trip or close the page. Please don't share sensitive personal information in the chat.
Cookies and storage on your device
- One login cookie (dipt_session), set only when you log in. It keeps you logged in for up to 30 days and is removed when you log out. It's essential to the site, and it can't be read by the page's scripts.
- Local storage in your browser remembers your home airport and, if you're not logged in, the trips you save on that device.
- No advertising or analytics cookies. Dipt doesn't use them.
- Travelpayouts, the affiliate network Dipt works with, runs a script on Dipt's pages. It reads the page's links and text so it can turn links to travel sites into affiliate links, and it may store data in your browser to do that.
When you follow a link to a partner, the partner's site may set its own cookies, for example to credit Dipt for your booking. Those are covered by the partner's privacy policy.
How we use information
- To run Dipt: show results, keep you logged in, and save your trips.
- To understand which features help people find trips, and to improve them.
- To keep Dipt secure and prevent abuse.
- To reply when you contact us.
We don't sell your personal information, share it for advertising, or use it to make automated decisions with legal effects about you.
Who we share it with
- Service providers who help run Dipt: our hosting provider (Render), Anthropic for the trip assistant, Travelpayouts (our affiliate network, whose script on our pages receives your IP address, browser details and the page's content), and Google Fonts, which delivers the site's typeface and receives your IP address when your browser downloads it.
- Travel partners, only when you click through to them. They receive what any website receives when you visit, plus our partner code. Your Dipt account details aren't sent to them.
- When required by law, or to protect the rights and safety of Dipt and its users.
- If Dipt is sold or merged, the new owner would continue under this policy, and we'd tell you.
How long we keep it
- Account details and saved trips: until you delete them or your account.
- Login sessions: up to 30 days, or until you log out.
- Partner click records: kept to understand how Dipt is used. When you delete your account, they're no longer linked to you.
Your choices and rights
- Delete your account at any time from the account menu ("Delete account"). This removes your email, password and saved trips.
- Remove saved trips by tapping the heart again.
- Ask us to show you the personal information we have about you, correct it, give you a copy, or delete it, by emailing support@dipttravel.com. Depending on where you live (for example Connecticut, California, the EU or the UK), you may have these rights by law. Wherever you live, we'll honor reasonable requests. You can also complain to your local data protection authority.
Security
Dipt uses HTTPS, stores passwords only as salted hashes, keeps login cookies out of reach of page scripts, and limits repeated login attempts. No system is perfectly secure, so please use a password you don't use anywhere else.
Children
Dipt isn't meant for anyone under 16, and we don't knowingly collect their personal information. If you think a child has given us information, contact us and we'll delete it.
Where your information is processed
Dipt and its service providers are based in the United States, so your information is processed there.
Changes to this policy
If we change this policy, we'll update the date at the top. For significant changes, we'll let you know on the site or by email if you have an account.
Contact
Email support@dipttravel.com with any questions about your privacy.