IberSky
Security Protocol

A Sanctuary of Absolute Privacy

“We believe travel begins with peace of mind. Your personal journey, financial details, and digital footprint belong entirely to you. IberSky is designed to search the skies, not your life.”

Our Guarantees

  • Zero Credit Card Storage
  • Zero Search Profiling
  • Essential Session Cookies Only
  • Direct Carrier Safe Passage
Looking for audit reports? View our Booking Audits page to see how we maintain direct rate honesty.
Section I

The Sovereign Zero-Storage Directive

Modern booking platforms have turned travelers into commodities, logging credit card details, profiling search patterns, and storing personal data on vulnerable databases. At IberSky, we have built a sanctuary.

Direct Handshake Routing

IberSky is an independent metasearch routing node—never an intermediary traveler merchant. We do not process, store, or hold your credit cards, billing profiles, or payment data.

Direct Airline Checkout

When you select a route, the IberSky Direct-Access API initiates a secure, encrypted handshake that transfers your session directly to the official booking node of the respective global carrier. Your checkout occurs directly on the airline’s official, regulated security systems.

Section II

Parametric Search (Zero Profiling)

We believe in search transparency. Traditional portals use persistent trackers to profile your searches and artificially inflate flight rates when they detect high demand or repeat visits.

Stateless Queries

Our search framework processes only the raw, objective parameters (your departure node, arrival node, and selected date) necessary to fetch real-time rates.

Anti-Pricing Manipulation

Because we do not track your personal identity, search frequency, or browsing history, we cannot manipulate pricing. Every search is treated as fresh, direct, and completely independent, securing the truest direct-to-carrier rate every single time.

Section III

Decoupled Architecture (No Ad Tracking)

We do not sell your behavior to data brokers or advertising agencies. Your privacy is paramount.

Zero Marketing Ad-Trackers

You will find no persistent third-party advertising cookies, retargeting pixels, or behavioral tracking scripts embedded within the IberSky domain.

Essential Session Isolation

We utilize minimal first-party session cookies solely to preserve basic interface configurations (such as dark-mode preference, currency choice, and active search inputs). These cookies are temporary, non-identifiable, and reside strictly within your local browser Interface.

Section IV

Cryptographic Safe-Passage & Security

Your security is our architectural baseline. All interactions inside the IberSky system are encrypted, stateless, and audited to guarantee absolute privacy and system integrity.

TLS End-to-End Encryption

Every parameter sent to our Global Distribution Integration is secured using industry-standard TLS (Transport Layer Security) encryption.

Secure Connection Isolation

The handshake between your browser Interface, our nodes, and the official carrier systems is completely isolated, preventing external eavesdropping or data interception.

Turnstile Bot Safeguard

We integrate Cloudflare Turnstile on our communication gateways to protect the system against automated floods. This verification runs completely stateless, validating human presence without storing, tracking, or collecting any of your personal identifiers or behavioral characteristics.

Stateless Rate Limiting

Our dispatch gateways enforce dynamic transaction rate limits via high-speed Cloudflare Workers KV stores. This system registers only the client IP address on a temporary KV cache that automatically expires and purges after 1 hour, logging no permanent telemetry.

Section V

Operational and Regulatory Integrity

We maintain total regulatory clarity to ensure compliance across all flight metasearch regulations.

Metasearch Exemption: As a direct meta-routing node and comparison platform, IberSky never acts as a travel booking agency. Our metasearch framework functions purely as a transparent window into global carrier databases, ensuring total independence from legacy commission structures or ticket-markup frameworks.

Your Sovereignty: You can wipe all session cookies instantly by clearing your browser settings or toggling your session state, instantly restoring your connection to a pristine, stateless identity.