Privacy Policy — SQ Award Finder

Last updated: 2026-06-17

SQ Award Finder is a personal-use browser tool (userscript and Chrome extension) for filtering Singapore Airlines KrisFlyer award availability. This policy explains what it does and does not do with your data.

The short version

SQ Award Finder does not collect, transmit, sell, or share any personal data. There is no server, no analytics, and no third-party data sharing. Everything happens locally in your browser, on your own already-signed-in singaporeair.com session.

What it accesses

• Your singaporeair.com session. The tool makes requests to Singapore Airlines' own award-search endpoints using the session you are already logged into, exactly as the website does when you search. It reads your KrisFlyer name, membership number and miles balance from the page's login response purely to display them in the panel and to show how an award's cost compares to your balance.
• Cookies (read-only, singaporeair.com only). The background service worker reads the session cookie to determine whether you are signed in before a scheduled check. The panel also reads Akamai's _abck (the site's bot-check state, so it can detect and gracefully wait out SQ's own CAPTCHA rather than fail), the disableCIBVS flag (which of SQ's booking flows is active), and the login cookie's expiry (shown as a "session valid until" readout). Cookie contents are never stored or sent anywhere.
• SQ's own booking pages (opt-in booking shortcuts). If you enable the optional ⚡ booking shortcuts, the tool clicks through SQ's real booking pages within your existing session — selecting the cheapest fare, your own saved KrisFlyer travellers, and (if enabled) advancing to the payment page. Any passenger details submitted go only to Singapore Airlines (exactly as if you had clicked), and the tool stops at the payment page — it never enters card/payment details and never completes a purchase. It never *types* personal data; it only selects existing saved options.

It never sees, stores, or handles your password — you sign in directly with Singapore Airlines, and the tool only uses the resulting session.

What it stores (locally, on your device)

Using the browser's local storage (localStorage for the userscript; chrome.storage.local for the extension), it saves only:

• your search inputs, filter settings and panel layout;
• scanned award results and flight details (cached briefly to avoid repeat requests);
• your watchlist and each watched route's open/close history (extension only);
• if you enable passenger auto-select, your own saved-traveller names (read from SQ's passenger page) so you can assign them to passenger slots — local only, never transmitted, cleared with a "Forget" button.

This data lives only in your browser. You can clear it any time via the panel's controls, or by removing the extension / userscript. None of it is transmitted off your device.

What it does NOT do

• No data is sent to the author or any third party.
• No tracking, analytics, advertising, or fingerprinting.
• No remote code is downloaded or executed; all logic ships in the package.
• No access to other websites — the extension runs only on https://www.singaporeair.com/*.

Permissions (extension)

storage, alarms, notifications, cookies, and offscreen (the last only to play a short alert chime — MV3 workers can't use the Audio API), plus host access to singaporeair.com, are used solely to provide the features above.

Disclaimer

This is an independent personal-use tool. It is not affiliated with, endorsed by, or operated by Singapore Airlines. Use it responsibly and at your own discretion.