Privacy Policy
Last updated: April 11, 2026
This Privacy Policy explains how Cybria Enterprises LLC ("we", "us", "our") collects, uses, and protects information in connection with the Amex Layover Display browser extension, the website at travel.cybria.net, and related services (collectively, the "Service").

1. The short version
   The extension runs entirely in your browser. It does not send your flight searches, itineraries, or browsing history anywhere.
   We do not use advertising, analytics, or behavioral tracking inside the extension.
   If you purchase a Pro license, we process your payment through Stripe and store only the minimum information needed to manage your license (email, license key, device IDs, subscription status).
   We never sell, rent, or share your personal information with third parties for marketing purposes.
2. What the extension does on your device
   Amex Layover Display activates only on pages under amextravel.com. When it runs, it reads the flight search data already present in the page and computes layover times locally. This data never leaves your browser. Specifically, the extension:

Reads the contents of Amex Travel flight search and review pages you are already viewing.
Inserts visual elements (layover badges, banners, sidebar panel) into those pages.
Stores your preferences (enabled/disabled toggle) in chrome.storage.local.
Does not make network requests to Cybria servers unless you activate a Pro license.
3. Information we collect
3.1 Free tier
When you use only the free version of the extension, we collect no information. The extension does not phone home, does not contact our servers, and does not transmit any usage data.

3.2 Pro tier
If you purchase and activate a Pro license, we collect and store:

Email address — used to send you the license key, billing receipts, and important service notices.
License key — a randomly generated identifier linked to your purchase.
Device identifiers — non-personal, randomly generated IDs used to count how many browsers your license is active on. These cannot be traced back to your device hardware.
Subscription state — active/expired, plan type, and next renewal date (returned by Stripe).
Service logs — IP address, request path, and user-agent for calls to the license API. Retained up to 30 days for abuse detection.
3.3 Payments
Payments are processed by Stripe, Inc. We never see or store your payment card details. Stripe's privacy policy is available at https://stripe.com/privacy.

3.4 Website visitors
The marketing website at travel.cybria.net currently sets no tracking cookies and loads no third-party analytics, fonts, or embeds. The only data stored in your browser is your own consent choice, saved in localStorage (not a cookie) so we can avoid asking again on every page load.

3.5 Cookies and consent
We use a consent module that gives you explicit control over any non-essential storage before anything loads. The categories are:

Strictly necessary — a single localStorage entry (cybria-consent-v1) that records your own consent choice. This is not a tracking technology and cannot be disabled, because without it we could not remember that you told us not to track you. No data leaves your browser.
Analytics — reserved category, currently empty. If we ever add privacy-respecting, aggregate analytics (for example, Plausible or a similar cookieless tool), it will only load after you opt in via the Cookie settings link in the footer. Off by default.
Marketing — reserved category, currently empty. We do not run advertising or remarketing and have no plans to. If that ever changes, we will ask first. Off by default.
You can review or change your choices at any time by clicking Cookie settings in the site footer. You can also withdraw consent entirely, in which case only the strictly necessary entry above remains.

None of the above applies to the browser extension itself. The extension only stores your on/off toggle in chrome.storage.local and, for Pro users, your license token. See section 2 above for details.

1. How we use information
   To generate, deliver, and verify your Pro license key.
   To send you receipts and service-critical emails.
   To detect and prevent license abuse or fraud.
   To fix bugs and respond to your support requests.
   To comply with legal obligations.
2. Data retention
   We keep Pro license data for as long as your license is active and for up to 24 months after cancellation so we can honor refund, reactivation, and accounting obligations. Service logs are deleted after 30 days. You can request earlier deletion by emailing privacy@cybria.net.
3. Sharing of information
   We share personal information only with the following categories of recipients, and only to the extent necessary:

Stripe, to process payments and manage subscriptions.
Email delivery providers, to send license keys and receipts.
Hosting providers, to run the license API and the website.
Law-enforcement or legal authorities when required by law.
We do not sell, rent, or share your personal information with advertisers or data brokers.

1. Your rights
   Depending on your jurisdiction (including residents of California and the European Economic Area), you may have the right to:

Access the personal information we hold about you
Correct inaccurate personal information
Request deletion of your personal information
Export your personal information in a portable format
Object to or restrict certain processing
Withdraw consent at any time
To exercise any of these rights, email privacy@cybria.net.

1. Security
   We protect the systems that store Pro license data with industry- standard controls: TLS 1.2+ for all connections, encrypted storage at rest, minimum-necessary access for employees, and separate production credentials from development. No system is perfect — if you believe your license has been compromised, contact us immediately.
2. Children's privacy
   The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
3. Changes to this policy
   We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top and, for Pro users, notify you by email. Continued use of the Service after changes means you accept the revised policy.
4. Contact
   Cybria Enterprises LLC
   Email: privacy@cybria.net
   Website: https://travel.cybria.net