Privacy Policy

1.Who runs Flight Atlas

Flight Atlas (flightatlas.org) is published by an independent individual creator. For anything related to this policy or your data, contact flightatlas.contact@gmail.com — we respond within 30 days.

2.Data you give us

Account: when you sign up we store your email address, username, first and last name, and a bcrypt hash of your password (we never store the password itself). We use this data to operate your account, and for nothing else.

Contact form: if you write to us through the contact form we store your email address, the subject and your message, so we can reply.

Saved content: premium features let you save filters and schedule automatic screenshots of your chart views. Screenshots are stored at unlisted URLs on our file storage. They contain chart data, not personal data. Every screenshot is deleted automatically 60 days after it was captured, image file included.

Email: we send transactional email (account verification, password resets, subscription renewal reminders, and account deletion confirmations). If you are a premium subscriber you can also turn on optional view-update emails for specific saved views — a weekly digest and/or a notice when a new launch matches that view, which may include the latest screenshot of the view. These are off until you enable them, they require a verified address, and every such email has a link to stop that view or all view emails. No marketing, no advertising lists, and your address is never shared.

3.Payments

Premium subscriptions are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we store only your Stripe customer and subscription identifiers and the subscription status and dates. Subscriptions renew automatically; we email you a reminder before each renewal, and you can cancel anytime from your profile page.

4.Traffic measurement

We measure traffic on our own servers, at the network edge, rather than with third-party tracking scripts. For each request we record: the page path, the referring site, your country and city (derived from your connection by our hosting provider), your browser family and device class, and the time of the request.

To count visits and returning visitors without identifying anyone, each visitor is assigned a pseudonymous identifier: a salted SHA-256 hash computed from the site, your IP address and your user-agent string. Your raw IP address is not stored by the analytics — only the irreversible hash. Daily aggregate counters are kept for 90 days; per-visit session records expire after 48 hours. The legal basis is our legitimate interest in understanding how the site is used and keeping it secure (GDPR Art. 6(1)(f)).

The site also uses Vercel Web Analytics, a cookie-free, aggregated page-view counter provided by our hosting platform. We do not use Google Analytics or any advertising or cross-site tracker.

5.Cookies

The only cookies Flight Atlas sets are strictly necessary authentication cookies, created when you log in (they keep you signed in and are httpOnly). Browsing without an account sets no cookies at all. Some display preferences are kept in your browser’s local storage and never sent to us. Because we use no non-essential cookies, there is no cookie banner.

6.AI usage

The launch descriptions shown on Flight Atlas are researched and written by an AI assistant (Anthropic’s Claude) from public sources, on a daily schedule. An AI assistant also helps the site’s administrator query the launch database. AI systems work on rocket-launch data only: the database tables holding user accounts and contact messages are technically excluded from anything an AI system can read, and your personal data is never sent to an AI service.

7.Third parties (processors)

These providers process data on our behalf, under their own data-processing agreements: Vercel (Vercel Inc., USA — hosting, edge network, web analytics, and file storage for screenshots), Neon (Neon Inc., USA — the PostgreSQL database holding accounts and launch data), Stripe (Stripe Inc., USA — payments), Resend (Resend Inc., USA — transactional email), and Upstash (Upstash Inc., USA — the datastore for the aggregated traffic counters described above).

We do not sell, rent, or share your data with anyone else. Launch data itself comes from public sources such as The Space Devs and contains no personal data.

8.Data retention and deletion

Your account data is kept until you delete your account, which you can do yourself at any time from your profile page. Deletion is immediate and permanent: it cancels any active subscription, and removes your account, saved filters and scheduled screenshots, both the database records and the stored image files. Scheduled screenshots are deleted automatically 60 days after capture in any case, and deleting a saved filter deletes its screenshots straight away. Analytics counters expire on the 90-day schedule above.

9.Your rights

Under the GDPR and similar laws you can access, rectify, export, and erase your personal data, object to processing, and lodge a complaint with your supervisory authority (in France, the CNIL — cnil.fr). Most of this you can do yourself from your profile page; for anything else, write to flightatlas.contact@gmail.com.

10.Hosting (legal notice)

This site is published non-professionally by an individual. Host: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, United States — vercel.com.

11.Changes

If this policy changes materially, the date at the top of this page will be updated. The current version always lives at flightatlas.org/privacy.