Privacy policy

• Your account — email address, password (stored scrambled by our sign-in provider; we never see it), and the name and username you choose. If you sign in with Google we receive your name and email from Google.
• Your age band: when you sign up we ask your date of birth, work out whether you're 13–17 or 18 and over, and keep only that. We never store the date itself. If you're under 13 we don't create an account or keep anything you entered.
• Your airfields — the airfields you mark as landed, wishlisted or card owned, cards you ask us to make, and the pilots you follow.
• Your logbook, if you switch it on: flights you enter (dates, airfields, aircraft registration and type, times, landings, role and remarks). Flights are private to you. Only if you choose to show route lines on your shared passport does it show the legs you've flown and in which year: never dates, times or remarks. To work with no signal, the app keeps a copy of your logbook, and any flights waiting to upload, on your own device.
• Photos of logbook pages, if you import from paper: each photo is sent to be read and is not kept. Only the flights you check and confirm are saved.
• Your email choices — whether you've asked for the newsletter, and when.
• Pilot Pro, if you subscribe: payment is taken by Stripe, which collects your card and billing details. We keep your Stripe customer and subscription references, your plan and its status, and a record of the terms you agreed to at checkout (what was shown, when, and that you accepted).
• Reports and blocks: if you report another pilot we keep the report (who, why and any note you add) so we can look into it. The pilot you report isn't told who reported them. If you block someone, we keep that so they can't follow you.
• Orders — when you buy, checkout is run by Shopify, which collects your name, delivery address and payment details. We see the order, not your card number.
• Anonymous page views — which page was viewed and when. We don't store anything in your browser for this, and we don't keep your IP address or link views to your account. To count visitors, our server makes a one-way code from your network address and browser type that changes every day, so you can't be followed from one day to the next.

• To run your account and the service you asked for — saving your landings, showing your passport, and sending you sign-in emails and a one-off email when a card you asked for is made. (Legal basis: contract.)
• To sell and deliver cards. (Contract, and legal obligation for tax records.)
• Newsletter — only if you ticked the box. Every newsletter has an unsubscribe link, and you can switch it off in your profile. (Consent.)
• Pilot Pro: to take payment, keep your membership in step, send the receipts and reminders the law requires, and keep proof of what you agreed to. (Contract, and legal obligation.)
• Keeping the community safe: handling reports and blocks, and protecting under-18s with private settings by default. (Legitimate interests, and our legal duties under the Online Safety Act.)
• Anonymous traffic counts — to see which pages are useful. (Legitimate interests; nothing identifies you.)

We don't sell your data and we don't use advertising or tracking cookies.

Your landings and wishlist are private unless you switch on your passport link in your profile. Then anyone with the link can see your name or username, the airfields you've landed at, your cards and your wishlist. Switch it off and the link stops working. Other pilots can find you by username to follow you.

Only the services that run the site for us, under contracts that protect your data:

• Supabase — database and sign-in.
• Lovable — website hosting, sending our emails, and reading the logbook photos you choose to import (through Lovable AI, which uses models from providers such as Google).
• Shopify — shop, checkout and order records.
• Stripe: Pilot Pro payments, invoices and tax.
• Google — only if you choose “Sign in with Google”.
• OpenFreeMap — serves the map images, so it receives your network address when a map loads.

Some of these providers are based in, or use servers in, the United States. Where data leaves the UK it is protected by the UK's adequacy regulations or the Information Commissioner's approved contract terms.

Only what the site needs to work: keeping you signed in, your basket, your light or dark choice, and whether you've seen the opening animation this visit. No analytics or advertising cookies, so there's no cookie banner.

• Account and airfield data — until you delete your account.
• Anonymous page views — up to 13 months.
• Pilot Pro: the record of the terms you agreed to, for at least 3 years after you subscribe; payment and invoice records for as long as tax law requires (usually six years), even if you delete your account.
• Reports: until they're dealt with, then up to 12 months.
• Order records — Shopify keeps these for as long as the law requires us to keep accounting records (usually six years), even if you delete your account.

You can:

• Download your data or delete your account yourself from your profile. Deleting removes your account, landings, logbook, wishlist, follows and card requests straight away.
• Ask us for a copy of anything else we hold, or to correct it.
• Object to how we use your data, or ask us to limit it.
• Withdraw newsletter consent at any time.

Email the email address at the bottom of this page and we'll reply within a month. If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Accounts are for people aged 13 and over. We ask everyone's date of birth at sign-up without saying what age is needed; if you're under 13 we don't create an account and we don't keep what you entered.

Many young pilots are under 18 (you can fly a glider solo at 14), so accounts for 13–17 year olds start private: your passport link is off, you aren't shown when people search by name, you're off leaderboards and the newsletter is off. You can change these in your profile.

If we change this policy we'll update the date at the top, and tell account holders by email about anything significant.