Privacy Policy

Last updated: 9 June 2026

This Privacy Policy explains how Skydive Tracker ("we", "us") collects and uses your personal data. We are the data controller for the purposes of the UK GDPR and EU GDPR.

1. Data we collect

• Account data: your email address, optional display name, and a securely hashed password.
• Profile data: the jumper name and home dropzone you optionally set to personalise the manifest.
• Billing data: if you subscribe, your subscription status and a Stripe customer identifier. Card details are collected and stored by Stripe, not by us.
• Usage & technical data: login timestamps, and standard server logs (such as IP address and browser type) used for security and to operate the Service.

2. How we use your data

• To create and manage your account and authenticate you.
• To provide the Service and personalise your manifest view.
• To process subscriptions and send transactional emails (e.g. password resets, receipts, trial and subscription notices).
• To secure the Service, prevent abuse, and comply with legal obligations.

3. Legal bases (UK/EU GDPR)

• Contract: providing the Service and processing payments.
• Legitimate interests: securing the Service and preventing fraud and abuse.
• Legal obligation: keeping records (e.g. for tax).
• Consent: where required, e.g. optional marketing (you can withdraw consent at any time).

4. Sharing & processors

We share data only with service providers who process it on our behalf:

• Stripe — payment processing.
• Resend — sending transactional email.
• Our hosting provider — running the servers and database.

We do not sell your personal data. We do not show third-party advertising.

5. Flight & manifest data

Aircraft positions are derived from public ADS-B networks, and manifest data from third-party dropzone-software providers. This operational data is not your personal account data and is subject to the rights of its respective providers.

6. Cookies

We use only strictly necessary cookies — a signed session cookie to keep you logged in. We do not use advertising or third-party tracking cookies, so no cookie-consent banner is required for them.

7. Data retention

We keep account data for as long as your account is active. If you delete your account we delete or anonymise your personal data within a reasonable period, except where we must retain records to meet legal obligations (e.g. billing records for tax purposes).

8. Your rights

Subject to law, you have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact us using the details below. You also have the right to complain to the UK Information Commissioner's Office (ICO) or your local supervisory authority.

9. International transfers

Some of our processors (e.g. Stripe, Resend) may process data outside the UK/EEA. Where they do, appropriate safeguards (such as Standard Contractual Clauses) are in place.

10. Children

The Service is not directed at children under 16, and we do not knowingly collect their personal data.

11. Changes

We may update this Policy from time to time. Material changes will be notified via the Service or by email.

12. Contact

For privacy questions or to exercise your rights: privacy@skydivetracker.com.