Privacy Policy

Effective date: March 31, 2025

1. What data we collect

Account information

When you create an account, we collect your name, email address, and a hashed password (or a Google account identifier if you sign in with Google). If you use Google OAuth, we also store your Google profile photo URL so it can be displayed in the app.

GPS tracking data

We fetch and store location data (latitude, longitude, altitude, timestamp) from Garmin and SPOT public feeds. This is data that pilots have chosen to share publicly through their tracking device's settings. We store this in our database to render flight tracks and history.

Usage data

We collect minimal server-side logs (request timestamps, errors) for debugging. We do not run third-party analytics trackers or advertising networks on this site.

2. How we use your data

To authenticate you and provide access to account features
To display your profile information and linked pilot data
To show GPS tracks and flights on the map
To send optional notifications (e.g., when a followed pilot starts flying)
To troubleshoot errors and maintain the Service

We do not sell your data. We do not use your data for advertising.

3. Location data and public visibility

GPS tracking data shown on Syncing Pilots comes from feeds that pilots have made publicly accessible. If your Garmin MapShare link is public or your SPOT feed is enabled, that data is visible on the internet generally — not just on this site. Syncing Pilots simply aggregates and displays it in one place.

If you want your tracking data removed from Syncing Pilots, you have two options:

Disable public sharing in your Garmin or SPOT account settings (this stops new data from being fetched)
Contact us at hello@syncingpilots.com to request deletion of stored data

4. Data sharing with third parties

We share data with:

Cloudflare — our hosting provider. They process requests and store our database (Cloudflare D1). See Cloudflare's privacy policy.
Google — if you use Google OAuth, Google handles authentication. See Google's privacy policy.
Map tile providers — Stadia Maps, OpenStreetMap, and ESRI serve map tiles when you use the map view. Your IP may be visible to them as part of the tile request.

We do not sell, rent, or share your personal data with marketing companies or data brokers.

5. Cookies and storage

We use a session cookie to keep you logged in. We store your map style preference in localStorage. We don't use tracking cookies or third-party ad cookies.

6. Data retention

Track point data is retained indefinitely to enable flight history viewing. Account data is retained as long as your account is active. If you delete your account or request data deletion, we will remove your account information and disassociate your profile within 30 days.

7. Security

Passwords are hashed using a secure algorithm before storage. All traffic is served over HTTPS. We use Cloudflare's infrastructure, which includes DDoS protection and edge security. No system is perfectly secure; we encourage you to use a strong, unique password.

8. Your rights

You can:

Access or export your account data by contacting us
Request correction of inaccurate account information
Request deletion of your account and associated personal data
Opt out of any future email communications (we don't send marketing emails)

9. Children

Syncing Pilots is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will promptly delete it.

10. Changes to this policy

We may update this Privacy Policy. The effective date above reflects the latest version. Significant changes will be noted on the site.

11. Contact

Questions or requests? Email hello@syncingpilots.com.