PRIVACY POLICY

1. OVERVIEW

AeroScope ("we", "our", "the platform") is a real-time flight tracking platform that processes publicly broadcast ADS-B data. We are committed to protecting your privacy and being transparent about our data practices. This policy applies to all users of the AeroScope web application at aeroscope.live.

2. WHAT DATA WE COLLECT

Authentication Data

When you log in, we process your authentication token to verify access. We do not collect email addresses, names, or other personal identifying information. Authentication tokens are generated server-side and expire after 24 hours.

Observer Location

If you choose to set an observer location (for distance calculations and threat scoring), this coordinate is stored in your browser's localStorage. It is sent to the server only for distance-based calculations during your active session. We do not permanently store your location on our servers.

Session Data

We collect standard session data necessary for platform operation:

• Authentication tokens (JWT, expires after 24 hours)
• WebSocket connection state
• User interface preferences (theme, map settings, filter selections)

Server Logs

Our web server maintains standard access logs that include IP addresses, request timestamps, user agents, and request paths. These logs are used solely for security monitoring and debugging, and are automatically purged after 7 days.

3. ADS-B DATA

The core of AeroScope's functionality involves processing ADS-B (Automatic Dependent Surveillance-Broadcast) data. This data is publicly broadcast by aircraft on the 1090 MHz radio frequency and includes aircraft identification, position, altitude, and velocity. This is not personal data. We do not collect any information about aircraft passengers, crew, or owners beyond what is publicly broadcast in ADS-B transmissions.

ADS-B data is sourced from community receiver networks (adsb.fi, adsb.lol, OpenSky) and is publicly available. AeroScope processes and enriches this data but does not create new surveillance capabilities beyond what is already publicly accessible.

4. COOKIES AND LOCAL STORAGE

AeroScope uses browser localStorage (not cookies) to store:

• Authentication tokens for maintaining your login session
• Observer location coordinates (if you set one)
• UI preferences (map center, zoom level, filter settings)
• Dismissed notification states

We do not use third-party cookies. We do not use advertising cookies. We do not use analytics cookies. No data is shared with any third-party tracking, advertising, or analytics services.

5. NO THIRD-PARTY TRACKING

AeroScope does not include any third-party tracking scripts, analytics services, advertising networks, or social media widgets that collect user data. We do not use Google Analytics, Facebook Pixel, or any similar services. The only external resources loaded are Google Fonts for typography.

6. DATA RETENTION

We maintain a strict data retention policy:

• Aircraft tracking data: Rolling 7-day window with automatic purging of older records
• Server logs: Automatically deleted after 7 days
• Authentication tokens: Expire after 24 hours and are not stored server-side after expiration
• User preferences: Stored only in your browser's localStorage; not on our servers

7. DATA SECURITY

All connections to AeroScope are encrypted using TLS 1.2/1.3. Authentication tokens are signed using industry-standard JWT (JSON Web Tokens). The platform employs rate limiting, request validation, and standard security headers to protect against common web vulnerabilities.

8. CONTACT FOR PRIVACY CONCERNS

If you have questions or concerns about this privacy policy or AeroScope's data practices, please contact us through the contact page. We will respond to privacy inquiries within 30 days.

9. CHANGES TO THIS POLICY

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.