Privacy Policy

Effective September 17, 2026

What we collect

• No account: your plans, saved airplanes and waypoints are stored only in your browser (local storage). We never see them.
• With an account: your email address, a password (stored hashed by our authentication provider, Supabase), and the airplanes, waypoints and flights you save so they can sync between your devices. Subscription status is stored as a plan name.
• Feedback: if you send feedback, we keep the message, the route you had loaded, the page you were on, your browser type, and your email if you give it.
• Usage counts: we record simple events such as "a VFR navlog was built" with the departure and destination identifiers, to see which features are used. These are not tied to your identity unless you are signed in.

What we don't do

We don't sell or rent personal data, we don't show ads, and we don't use advertising trackers. We don't collect your location; the map shows what you type.

Third parties that see requests from your browser

To build a navlog the site fetches data from the FAA (tfr.faa.gov, aviationweather.gov through our relay), the National Weather Service (api.weather.gov), OpenStreetMap, FAA chart tile servers (ArcGIS), Google Fonts and code libraries hosted on public CDNs. Those services see your IP address and the request, as with any website. The Weather tab can also show an embedded weather map from Windy.com; it loads only when you click to load it, and it may set its own cookies once you do. Accounts and saved data are hosted by Supabase; the site is hosted by Netlify. Payments, when offered, are handled by Stripe; we never see your card number.

Cookies and storage

We use browser local storage to remember your plan, airplanes and preferences, and a session token to keep you signed in. We set no cookies of our own, run no analytics and use no advertising trackers. The Cookies and Local Storage page lists every item by name.

Your choices

You can export or delete your saved library from the app at any time. To delete your account and everything tied to it, email support@easynavlog.com from the address on the account and we will remove it within 30 days.

How long we keep it

Account data (your email and saved library) is kept while the account exists and is deleted within 30 days of a deletion request. Feedback messages are kept for up to two years so we can trace a bug back to the report that found it. Usage counts are aggregate and are not tied to an identity once the account is gone. Payment records are kept as long as tax law requires, currently seven years, and are held by Stripe.

Your rights

Whatever law applies where you live, we do the same thing: you can see what we hold, correct it, take it with you, or have it deleted. Email support@easynavlog.com from the address on the account. We respond within 30 days and there is no charge. You can export your whole library from inside the app without asking us at all.

If we ever refuse a request, we will say why, and you can reply to appeal it; a person reads the appeal. You can also complain to your state attorney general, or to your data protection authority if you are in the UK or EU.

Being plain about scope: EasyNavLog is a one-person business and does not meet the size thresholds that trigger the Florida Digital Bill of Rights, the California Consumer Privacy Act, or the other US state privacy statutes. We are telling you about these rights and honouring them because it is the right way to run a service, not because a statute forces us to. If that changes as the business grows, this page changes with it.

Where your data is held

Accounts and saved libraries are stored by Supabase and the site is served by Netlify, both on infrastructure in the United States. If you are outside the US, using the service means your data is processed in the US.

Security and breaches

Passwords are hashed by Supabase and we never see them. Access to the database is restricted by row-level security so one account cannot read another's data. No system is perfect: if we discover a breach affecting your personal data, we will notify affected users by email without unreasonable delay, as Florida law requires.

Children

The service is not directed at children under 13 and we do not knowingly collect their data. Student pilots are often 16 or 17; we treat their data exactly as we treat everyone's, and because we run no advertising and sell nothing to anyone, there is no targeted advertising or data sale to opt out of. A parent or guardian can email us to review or delete a minor's account.

Changes

If this policy changes materially we will post the new version here with a new effective date.

Contact

support@easynavlog.com. See also the Terms of Use, the Cookie Policy and the Refund Policy.