Privacy Policy
FitsTheBin (fitsthebin.com)
Effective date: October 4, 2026
Last updated: October 4, 2026
1. Who we are
FitsTheBin ("FitsTheBin", "we", "us") is a website that helps travellers check luggage sizes against airline rules and find suitable bags. The site is operated by an individual based in Québec, Canada.
For questions about this policy or your personal information, contact the person in charge of the protection of personal information:
- Name / title: FitsTheBin, person in charge of the protection of personal information
- Email: [email protected]
For cookies specifically, you can also write to [email protected]. See our Cookie Policy.
2. The short version
- You don't need an account to use FitsTheBin, and we don't ask you for your name, address or payment details.
- We collect limited technical data (like your IP address and device information) so the site works, stays secure, and so we can understand how it's used.
- Analytics and advertising tools only run if you agree through our cookie banner.
- Anything you post publicly (comments, bag or airline submissions) can be seen by other visitors. Please don't include personal information in it.
- We don't sell your personal information for money.
3. What we collect
3.1 Information collected automatically
When you visit, certain information is collected by us and by our service providers, such as:
- IP address and approximate location (country/region/city derived from the IP address);
- browser type, operating system, device type, screen size and language;
- pages viewed, links clicked, referring page, date and time, and approximate time spent;
- how you interact with the page (clicks, scrolling, mouse movement), including, where you've consented, session recordings and heatmaps with form inputs masked;
- security and anti-abuse signals (for example, whether a request looks automated).
This is collected through cookies and similar technologies. See the Cookie Policy for the details.
3.2 Information you submit
You can submit content through our forms: Add a bag, Add an airline, Flag a rule, Flag a bag, and Did this bag fly. This may include bag dimensions and details, airline names, rule descriptions, error reports, and any comment you write. We do not ask for your name or email address in these forms. Please do not include personal information in what you submit.
If you contact us by email, we receive your email address and whatever you choose to tell us, and we use it only to reply and keep a record of the exchange.
3.3 Comments and user-generated content
Comments and submissions that are published on the site are public. Other visitors can read them, and they may be copied by others or indexed by search engines. We may review, edit or remove content at our discretion.
3.4 What we don't intentionally collect
We don't intentionally collect sensitive personal information, and we don't knowingly collect personal information from children under 14. If you think a child has given us personal information, contact [email protected] and we will delete it.
4. Why we use your information
| Purpose | Examples |
|---|---|
| Provide and operate the site | Showing airline rules and bag data, processing your submissions and flags |
| Security and abuse prevention | Blocking bots and spam on forms (Cloudflare Turnstile), protecting against attacks (Cloudflare) |
| Understand and improve the site | Aggregated analytics (Google Analytics), behaviour insights (Microsoft Clarity) |
| Advertising | Showing ads and measuring their performance, when ads are enabled and you've consented where required |
| Moderation and data quality | Reviewing and correcting rules, bags and comments |
| Legal compliance and protecting our rights | Responding to legal requests, enforcing our Terms of Service |
We do not use personal information for automated decisions that significantly affect you.
Legal bases (for visitors in the EU/UK/EEA): your consent (analytics and advertising cookies and similar technologies, which you can withdraw at any time); our legitimate interests (operating, securing and improving the site, moderating content, and preventing abuse); and compliance with legal obligations.
Québec and Canada: we collect personal information with your consent, which may be implied where permitted by law and for the purposes described in this policy. Optional tracking and profiling features are off until you turn them on.
5. Who we share information with
We use service providers who process information on our behalf. We don't sell your personal information for money.
| Provider | Purpose | Notes |
|---|---|---|
| Cloudflare, Inc. | Network proxy, content delivery, DDoS and bot protection | Processes visitor requests, including IP addresses, for all visitors |
| Cloudflare Turnstile | Bot and spam protection on our forms | Evaluates browser and interaction signals to tell humans from bots |
| Supabase | Database hosting | Stores airline rules, bag data and user submissions. Hosted in the United States (West US, Oregon) |
| Google Tag Manager | Tag management | Loads our other tags according to your cookie choices |
| Google Analytics (GA4) | Audience measurement | Used only with your consent (Google Consent Mode is in place). Event data retained 2 months; user-level data retained 14 months |
| Google Ads / ad serving (when enabled) | Showing ads and measuring ad performance | Used only with your consent where required. May involve personalized advertising |
| Microsoft Clarity | Session recordings, heatmaps, behaviour analytics | Used only with your consent. Form inputs are masked |
| Google Fonts | Web fonts | Your browser requests fonts from Google's servers, which receive your IP address |
| Buy Me a Coffee (optional) | Voluntary support/donations | If you click through, you leave our site. Their privacy policy applies and we don't receive your payment details |
Some of these providers act as independent controllers of the data they receive for their own purposes (notably Google and Microsoft in advertising and analytics contexts). Please see their privacy policies: Google, Microsoft, Cloudflare, Supabase.
We may also disclose information when required by law, to respond to valid legal process, to protect rights, safety and security, or in connection with a sale or reorganization of the site.
6. Where your information is processed
FitsTheBin is operated from Québec, Canada, and our providers process information in other countries, including the United States and others where they operate. As a result, your information may be stored or processed outside Québec and outside your own country, where privacy laws may differ. Before relying on such providers, we take reasonable steps to ensure protections appropriate to the sensitivity of the information, such as contractual commitments and the safeguards offered by those providers. For transfers from the EU/UK, providers rely on mechanisms such as the EU–U.S. Data Privacy Framework or Standard Contractual Clauses.
7. How long we keep information
We keep information only as long as needed for the purposes in this policy:
- Airline rules, bag data and published submissions: kept as long as they remain useful and accurate. They contain no personal information.
- Comments: kept until removed by us or on request.
- Google Analytics: event data 2 months; user-level data 14 months.
- Microsoft Clarity: retained according to Microsoft's retention settings for Clarity (currently around 13 months for most data).
- Cloudflare logs and security data: retained by Cloudflare under its own retention schedules.
- Emails to us: kept as long as needed to respond and for reasonable record-keeping.
- Cookie consent choice: stored in your browser (see the Cookie Policy).
When information is no longer needed, we delete it or anonymize it.
8. Your choices and rights
Cookie and tracking choices. You can accept, refuse or change your choices at any time through the cookie settings link in the site footer. You can also use your browser settings, and we respect browser signals like Global Privacy Control where technically feasible.
Rights. Depending on where you live, you may have the right to:
- ask whether we hold personal information about you and access it;
- request correction of inaccurate information;
- request deletion, or in Québec, ask that we stop disseminating your information or de-index it where the law allows;
- withdraw consent at any time;
- receive your information in a structured, commonly used format (portability);
- object to or restrict certain processing (EU/UK);
- not be subject to purely automated decisions with significant effects (we don't make such decisions);
- opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising (certain U.S. states).
To exercise a right, email [email protected]. Because we don't collect names or accounts, we may ask for details (like the page and date, or the content you posted) to locate your information, and we may need to verify that a request is yours. We aim to respond within 30 days. We won't discriminate against you for exercising your rights.
Complaints. You may contact us first. You may also contact the Commission d'accès à l'information du Québec (cai.gouv.qc.ca), the Office of the Privacy Commissioner of Canada (priv.gc.ca), or your local data protection authority.
9. Québec-specific notices
- Technologies with identification, location or profiling functions. FitsTheBin uses analytics and (when enabled) advertising technologies that can profile visitors' interests and behaviour. They are off by default and only activated if you accept them through the cookie banner.
- Person in charge: see Section 1.
- Communication outside Québec: see Section 6.
- Language: this policy is also available in French. Politique de confidentialité
10. Security
We use reasonable technical and organizational measures to protect the information we hold, including encrypted connections (HTTPS), access controls on our database, and bot protection. No online service is completely secure. If a confidentiality incident presenting a risk of serious injury occurs, we will notify affected persons and the relevant authorities as required by law.
11. Advertising
We plan to show ads on FitsTheBin. When enabled, ads may be provided by Google or its partners, which may use cookies and similar technologies to show ads, limit repetition, and measure performance. Personalized advertising is only used if you consent; otherwise, ads (where displayed) may be non-personalized. You can manage Google ad personalization at adssettings.google.com.
12. Links to other sites
FitsTheBin links to airline websites and other third parties (for example, Buy Me a Coffee). We are not responsible for their privacy practices. Please read their policies.
13. Changes to this policy
We may update this policy. We will change the "Last updated" date and, for material changes, give notice on the site. Where required, we'll ask for your consent again.
14. Contact
- Privacy: [email protected]
- Cookies: [email protected]
- Terms of Service: [email protected]