FlightDesk Aero / Privacy notice
Privacy notice
This notice explains what we keep about you when you use flightdeskaero.com, and in particular when you create an account. We keep as little as we can, on our own server in the European Union, and we never sell your data or show you advertising.
Who we are
Controller: [TO COMPLETE: company name, address and registration number]. Contact for anything about your data: [TO COMPLETE: email address].
What we keep, and why
- Your account: email address, optional name, preferred language, date of sign-up and last sign-in. We need them to run your account (contract, GDPR art. 6(1)(b)).
- How you sign in: if you use Google, the identifier Google gives us for your account and the email it confirms. We do not receive your Google password or contacts.
- Sessions: when each session started and was last used, and your browser's name (user agent), so you can see and end them. Sessions end after 30 days without use.
- Sign-in links: the email address and the IP address that asked for a link, kept 30 days to stop abuse (legitimate interest in security, art. 6(1)(f)).
- Your answers: which questions you answered, with which numbers, what you chose, how sure you said you were and when, and the confusion that a wrong option points to, to show your progress, your recurring confusions and your calibration (contract, art. 6(1)(b)).
- Error reports: what you write when you report an error in a question, with the email address you give or your account if you are signed in, so we can check it and answer you (legitimate interest in a correct question bank, art. 6(1)(f)). Reports stay after the question is fixed; if you delete your account, they are kept without your name.
- Consents: which version of these documents you accepted and when (legal obligation, art. 6(1)(c)).
- Payments (later): when paid plans start, the payment provider will handle your card; we will only receive what you bought and its status. This notice will be updated first.
Cookies and local storage
We use only what the site needs to work, so no consent banner is required: the fda_session cookie keeps you signed in (30 days), the fda_oauth cookie protects a Google sign-in for 10 minutes, and your browser remembers your chosen language (crp5.lang). We use no analytics or advertising cookies.
Who else handles your data
- Hetzner Online (Germany) hosts our server in the EU.
- [TO COMPLETE: email provider, e.g. Brevo, France] sends the sign-in emails.
- Google if you choose "Continue with Google"; Google handles your Google account under its own privacy policy. The site's fonts are also loaded from Google Fonts, which sees your IP address.
How long we keep it
Your account and answers stay until you delete the account. Deleting it removes everything listed above at once, except what the law makes us keep (for example invoices, once paid plans exist).
Your rights
You can see and download all your data from your account ("Download my data"), correct your name and language there, and delete your account yourself. You can also ask us for access, correction, erasure, restriction or portability, or object to processing, at the contact address above. You may complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro) or the authority where you live.
Age
Accounts are for people aged 16 or over. Younger students need a parent or guardian to create the account for them.