Privacy Policy - Aviation Database

Privacy Policy

How we handle your data, your location, and public aviation records.

Last Updated: June 18, 2026
The Short Version
We collect the bare minimum required to run your account. We don't use third-party marketing trackers, we don't sell your data, and you can delete your account and location tracking history at any time. Because this site automates flight tracking based on your specific location, we store your latitude/longitude coordinates if you choose to enable those features.
1. Information We Collect

Depending on how you interact with our website, we may collect the following types of information:

Account Information

If you register for an account, we collect the basic information required to secure and identify your profile. This includes your Name, Email Address, and a securely hashed password.

Location Data

To use our automated tracking features (such as generating a personal sightings log of overhead flights), active members must set a physical location on their profile. We store this specific latitude and longitude coordinate in our database. This allows our background scripts to continuously query global flight APIs for aircraft passing within a 5-mile radius of your location.

Sighting & API Usage Data

As the system tracks flights overhead, it generates a permanent database log tied to your account. This log includes the aircraft registration, route, and the exact timestamp it was seen near your location. Additionally, if you generate personal API keys to query your own data, we log the usage metrics (request counts) associated with those keys to monitor consumption and prevent abuse.

2. Cookies and Security Tokens

We use strict, minimal cookies to ensure the security and basic functionality of the platform. We do not use third-party advertising or tracking cookies.

  • Session Cookies: Used exclusively to keep you authenticated and logged in as you navigate between pages.
  • CSRF Tokens: We generate cryptographic tokens (Cross-Site Request Forgery tokens) to secure forms and API requests against unauthorized commands submitted on your behalf.
3. Third-Party Services & Data Sources

Because this site does not utilize physical receivers or hardware of its own, it relies on external services and APIs to populate the database and interface:

  • Flight Tracking & Indexing APIs: Our background servers constantly communicate with public global flight APIs and community-run virtual radar feeders to aggregate aircraft telemetry, route data, and registrations. These backend requests are anonymous and do not transmit your personal data.
  • Aircraft Imagery: We pull aircraft photos dynamically from open-source aviation APIs. When an image loads, your browser makes a direct request to these image hosts, subjecting you to their standard server logging.
  • Mapping Services: Our routing and FIR maps utilize Leaflet.js alongside external map tile providers. Rendering interactive maps requires downloading visual map tiles directly from these external servers.
4. Public Aviation Data Disclaimer

The core data on this website (aircraft registrations, callsigns, altitudes, speeds, operators, and routes) originates from unencrypted ADS-B (Automatic Dependent Surveillance–Broadcast) radio signals broadcasted publicly by aircraft in flight.

This data pertains to machines, not individuals. ADS-B is an international aviation safety standard. Aggregating, indexing, and archiving this telemetry from public APIs is standard practice for aviation hobbyists and does not constitute the tracking of personal, private information under standard privacy frameworks.

5. Data Retention & Your Rights

You have full control over your personal tracking data. You can update or remove your set location coordinates at any time from your Profile page. Removing your location will instantly stop our background Python scripts from logging new overhead flights to your account.

If you wish to request a complete export of your data, or would like your account, location data, and personal sightings logs permanently deleted from our database, please contact the site administrator at admin@yourdomain.com.