Privacy Policy

Last updated September 28, 2026

This policy explains what Airfield Passport (“we”, “us”) collects, why, and what you can do about it. The short version: we collect what you give us to keep your logbook, we don't sell it, we don't show ads, and we don't track you around the web.

What we collect

• Your account: your email address, your username, and your password, stored only as a secure hash (we can't read it).
• What you log: logbook entries (dates, routes, landings, aircraft and tail numbers, role, purpose, companions and trip notes), airfield notes and ratings, your wishlist, your home field and your preferences.
• Photos you add. We re-encode every photo when it's uploaded, which removes its location, camera details and other hidden metadata, and we keep a resized copy rather than the original.
• What you share with other pilots: photos you choose to share on airfield pages, place ratings, and courtesy car and closed-place reports.
• Subscription details: if you subscribe to Pro, your plan, its status and renewal date, and the IDs Stripe uses for you. Your card details go straight to Stripe; we never see or store them.
• Technical data: a session cookie that keeps you logged in, and your IP address, which we use briefly to prevent abuse (such as repeated failed logins). Our servers may keep standard logs (IP address, time and page requested) for up to 30 days, for security and troubleshooting.

How we use it

• To run the service for you: your map, stamps, milestones, records and suggestions are all computed from what you log.
• To send the emails you ask for: sign-up, log-in and address confirmation links. We don't send marketing email.
• To take payment for Pro and keep your subscription's status up to date.
• To keep the service secure and working, and to enforce our Terms of Service.

We don't sell or rent your personal information, we don't use it for advertising, and we don't use analytics or tracking cookies.

Who can see what

• Your logbook, notes, wishlist, home field and private photos are visible only to you. The people who run the service can access them when needed to operate it, for example to restore a backup or investigate a problem.
• Your passport page (your visited fields, state stamps, milestones and records) is private unless you make it public in your Profile. It never shows dates, notes, companions, aircraft, your wishlist or your home field.
• Photos you share are reviewed and then shown on the airfield's page with their caption, credited with your username to logged-in pilots and as “a pilot” to visitors.
• Place ratings are shown only as an average and a count. Logged-in pilots see who reported a courtesy car; visitors don't.

Services we use

• Stripe processes payments for Pro (Stripe's privacy policy).
• Resend delivers our emails, so it receives your email address and the message (Resend's privacy policy).
• Map images are loaded by your browser directly from tile.openstreetmap.org, the FAA's chart service and the USGS, which see your IP address and the area of the map you're viewing.
• Place names link to Google Maps; Google only gets involved if you follow one of those links.

Cookies and local storage

We use one cookie, which keeps you logged in; the service doesn't work without it. Your browser also remembers a few display preferences (like map layers) in its local storage, on your device only.

How long we keep it

We keep your data while you have an account. When you delete your account, your logbook, photos, notes, wishlist and settings are deleted right away. Ratings and reports you shared with other pilots stay, no longer linked to you. Copies in our backups are deleted as those backups are replaced, on a rolling schedule. Stripe keeps payment records as the law requires.

Your choices and rights

• Export your logbook as a CSV file, and download all your photos as a .zip, at any time.
• Change your email address and password, make your passport page private, and unshare or delete photos, from your Profile.
• Delete your account, and everything in it, from your Profile.
• Ask us for a copy of your data, or to correct or delete it, by emailing [email protected]. Depending on where you live (for example California, or the EU and UK), you may have further rights under local law; we'll honor them.

Security

The service runs over HTTPS, passwords are hashed, login attempts are rate-limited, and private photos are served only to you (and to the people who run the service, when needed). No system is perfectly secure, but we work to protect your data, and we'll tell you if a breach affects it.

Children

The service isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has given us information, contact us and we'll delete it.

Changes to this policy

We'll post any changes here and update the date above. For significant changes, we'll tell you by email or on the site first.

Contact

Questions about your privacy? Email [email protected].