Privacy Policy

Last updated: March 2, 2026

Introduction

Skylogs ("we", "us", "our") is a flight logbook service for paragliding and hang gliding pilots. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

We believe in transparency and simplicity. We collect only what we need to provide the service, and we don't sell your personal data to anyone.

Data we collect

Account information

When you create an account, we collect:

• Email address
• Display name and username
• Password (stored as a secure hash — we never store plaintext passwords)
• Profile information you choose to provide (bio, location, license level)

If you sign in with Google OAuth, we receive your name and email from Google. We do not access your Google contacts, calendar, or other data.

Flight data

When you upload a flight, we collect:

• The track file you upload (IGC, KML, or GPX)
• GPS coordinates, altitude, timestamps, and other data contained in the track file
• Derived statistics: distance, duration, max altitude, thermal locations, glide ratios, etc.
• Any notes, comments, or descriptions you add to flights

Weather data

For each flight, we may fetch weather conditions (temperature, wind speed, wind direction, humidity) from third-party weather services based on the flight's GPS coordinates and time. This data is stored alongside your flight record.

Usage data

We collect standard server logs including IP addresses, browser type, and pages visited. This data is used for security monitoring and service improvement.

How we use your data

• Provide the service — parse your flights, calculate statistics, display maps and charts.
• Community features — show your public flights on leaderboards, pilot profiles, and club pages (respecting your visibility settings).
• Learning platform — facilitate mentorship, debriefs, and competency tracking if you opt into those features.
• Weather enrichment — fetch weather data for your flights from third-party providers.
• Account management — handle authentication, password resets, and email notifications.
• Service improvement — analyze aggregate usage patterns to improve features (never individual tracking).

Third-party services

We integrate with the following services to provide Skylogs:

Cookies

Skylogs uses the following cookies:

• Session cookie — required to keep you logged in. Expires when you close your browser or after a period of inactivity.
• Remember-me cookie — optional, persists your login across browser sessions if you choose "Remember me".
• Advertising cookies — Google AdSense may set cookies to serve relevant ads. You can opt out via Google Ads Settings.

We do not use analytics or tracking cookies beyond what is listed above.

Visibility & sharing

Skylogs gives you control over who can see your flights and profile. Each flight has a visibility setting:

• Private — only you can see it.
• Mentor — visible to you and your mentor(s).
• Cohort — visible to members of your learning cohort.
• Public — visible to everyone, including non-logged-in visitors via the share URL.

Public flights appear on leaderboards and pilot profiles. You can change a flight's visibility at any time.

Data storage & security

Your data is stored in a MongoDB database. We take reasonable measures to protect your data, including encrypted connections (HTTPS), secure password hashing, and regular backups.

Uploaded track files and attachments are stored securely using Shrine file uploads.

Your rights

You have the right to:

• Access — view all data we hold about you (your profile and flights are always accessible in your account).
• Export — download your original track files at any time.
• Correct — update your profile information and flight details.
• Delete — delete individual flights or your entire account. When you delete your account, all associated data is permanently removed.
• Restrict — set flights to private to prevent public access.

To exercise any of these rights, use the settings in your account or contact us at [email protected].

Data retention

We retain your data for as long as your account is active. If you delete your account, we permanently remove all your personal data and flight records within 30 days.

Server logs are retained for up to 90 days for security and debugging purposes, then automatically purged.

Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we'll notify registered users by email. The "Last updated" date at the top of this page indicates when the policy was last revised.

Questions?

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected] or visit our Contact page.