Privacy policy

• Your account — email address, password (stored scrambled by our sign-in provider; we never see it), and the name and username you choose. If you sign in with Google we receive your name and email from Google.
• Your airfields — the airfields you mark as landed, wishlisted or card owned, cards you ask us to make, and the pilots you follow.
• Your logbook, if you switch it on: flights you enter (dates, airfields, aircraft registration and type, times, landings, role and remarks). Flights are private to you. Only if you choose to show route lines on your shared passport does it show the legs you've flown and in which year: never dates, times or remarks. To work with no signal, the app keeps a copy of your logbook, and any flights waiting to upload, on your own device.
• Photos of logbook pages, if you import from paper: each photo is sent to be read and is not kept. Only the flights you check and confirm are saved.
• Your email choices — whether you've asked for the newsletter, and when.
• Orders — when you buy, checkout is run by Shopify, which collects your name, delivery address and payment details. We see the order, not your card number.
• Anonymous page views — which page was viewed and when. We don't store anything in your browser for this, and we don't keep your IP address or link views to your account. To count visitors, our server makes a one-way code from your network address and browser type that changes every day, so you can't be followed from one day to the next.

• To run your account and the service you asked for — saving your landings, showing your passport, and sending you sign-in emails and a one-off email when a card you asked for is made. (Legal basis: contract.)
• To sell and deliver cards. (Contract, and legal obligation for tax records.)
• Newsletter — only if you ticked the box. Every newsletter has an unsubscribe link, and you can switch it off in your profile. (Consent.)
• Anonymous traffic counts — to see which pages are useful. (Legitimate interests; nothing identifies you.)

We don't sell your data and we don't use advertising or tracking cookies.

Your landings and wishlist are private unless you switch on your passport link in your profile. Then anyone with the link can see your name or username, the airfields you've landed at, your cards and your wishlist. Switch it off and the link stops working. Other pilots can find you by username to follow you.

Only the services that run the site for us, under contracts that protect your data:

• Supabase — database and sign-in.
• Lovable — website hosting, sending our emails, and reading the logbook photos you choose to import (through Lovable AI, which uses models from providers such as Google).
• Shopify — shop, checkout and order records.
• Google — only if you choose “Sign in with Google”.
• OpenFreeMap — serves the map images, so it receives your network address when a map loads.

Some of these providers are based in, or use servers in, the United States. Where data leaves the UK it is protected by the UK's adequacy regulations or the Information Commissioner's approved contract terms.

Only what the site needs to work: keeping you signed in, your basket, your light or dark choice, and whether you've seen the opening animation this visit. No analytics or advertising cookies, so there's no cookie banner.

• Account and airfield data — until you delete your account.
• Anonymous page views — up to 13 months.
• Order records — Shopify keeps these for as long as the law requires us to keep accounting records (usually six years), even if you delete your account.

You can:

• Download your data or delete your account yourself from your profile. Deleting removes your account, landings, logbook, wishlist, follows and card requests straight away.
• Ask us for a copy of anything else we hold, or to correct it.
• Object to how we use your data, or ask us to limit it.
• Withdraw newsletter consent at any time.

Email the email address at the bottom of this page and we'll reply within a month. If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Accounts are for people aged 13 and over.

If we change this policy we'll update the date at the top, and tell account holders by email about anything significant.