Privacy Policy

Thank you for using Where2Fly. Even though this is only a hobby project, I strive to meet the privacy requirements of GDPR and ePrivacy regulations.

In short, I aim to collect as little data about you as possible. I minimize the use of cookies, choose privacy-friendly services, and carefully balance what data is collected.

For all visitors

Session Cookies

"where2fly_session" and "XSRF-token" are session cookies strictly required to perform and secure searches, and provide this service. They are deleted when the browser window is closed and do not collect or store personal data.

"remember_web_xxxxxx" is a cookie that remembers your login so you don't need to login each day.

Browser data

Automatically recorded by our servers for security, optimization, and functionality purposes. This may include your IP address, browser type, and language.

Local Storage

We use local storage on your device to save the map position for your convenience. This data is stored locally on your device and is not transmitted to our servers or shared with any third parties.

Subprocessors

  • Scaleway: EU-based service for sending out emails, ensuring that your email address is handled securely.
  • Self-hosted Umami Analytics: Used for website analytics with privacy in mind, without tracking your personal data.

For Where2Fly account holders

When you register an account, the following data is collected and used:

  • E-mail address: Used to verify your account, recover your account, notify you of security breaches, and send important service-related updates (not including marketing).
  • Username: Used for login and visible to other users as your identifier.
  • Password: Stored securely and hashed in the database.

Legal Basis for Processing: Your data is processed based on your consent when creating an account and our legitimate interest in providing a secure, functional service.

Data Retention: Your data is stored only as long as necessary to provide the service or as required by law. Account data is retained until you choose to delete your account.

Your Rights: You have the right to access, rectify, or erase your personal data, restrict or object to its processing, and request data portability. To exercise these rights, please contact Blt950 on Discord.

Contact Us: For any questions or concerns about this privacy policy, please contact Blt950 on Discord.

Create an account to fill the map with your own scenery list.