The short version: we collect the minimum a pilot community needs to run, we use it only to run the site, we sell nothing to anyone, and there are no ads and no third-party trackers. The long version follows.
| WHEN | WHAT |
|---|---|
| Waitlist | Your email address, the time you joined, and the IP address the signup came from (kept to stop abuse). |
| Account | Name, email address, and a cryptographic hash of your password — we never store or see the password itself. Optionally your home field and aircraft, if you add them. |
| Using the site | The airports you mark as flown, and — as posting features open — whatever you choose to post. Standard web-server logs (IP address, pages requested, timestamps) are kept briefly for security and debugging. |
| Never | No payment details (the site takes no payments), no advertising identifiers, no analytics trackers, no location from your device. |
To sign you in, to show your own logbook and profile back to you, to send the waitlist its one promised email and account holders service emails (a password reset, a feature opening, a change to these documents). That is the list. We do not sell or rent personal information, we do not share it with advertisers, and we do not send marketing on behalf of anyone else.
One: pg_session, which keeps you signed in. It is HttpOnly, Secure, and expires after 180 days or when you sign out. There are no advertising or analytics cookies.
Your profile name, and whatever you choose to attach to it — your home field, aircraft, logged fields, and anything you post. Your email address is never shown to other members. Flight positions are shared only when you switch sharing on, for one flight, to the audience you pick, and stop at landing.
Account data for as long as the account exists. Waitlist addresses until the promised email is sent or you ask to come off the list. Server logs for a matter of weeks. When you delete your account, your personal data and content are deleted from the live site promptly and from backups in the ordinary rotation.
Email dave@tvacom.com to see the data we hold about you, to correct it, to come off the waitlist, or to delete your account and everything in it. We honour these requests for everyone, wherever you live, and we will act within 30 days.
Passwords are hashed with scrypt and never stored in the clear; everything travels over HTTPS; sessions are server-side and revocable; the database lives on a server only we can reach. No small site can promise perfection — if a breach ever touches your data, we will tell you what happened and what we are doing about it, promptly.
The site is for pilots and aviation enthusiasts and is not directed to children under 13. We do not knowingly collect their data; if you believe a child has an account, tell us and we will delete it.
If this policy changes in a way that matters, the new version is posted here with a new effective date and account holders are told by email.