• Flyaboo is run by one person as a hobby, not by a company. They are the data controller.
• To ask anything about your data, or to complain, use COMPLAIN OR APPEAL and choose "About my data". Every one is read and answered.
• If you aren't happy with the answer you can complain to the Information Commissioner's Office at ico.org.uk. You can go to them directly; you don't have to come here first.

• Your email address and password — so you can sign in, and so we can reply to you. The password is stored as a bcrypt hash and cannot be read back, by us or anybody else.
• Your operator name and display name — shown to other spotters on the board, the leaderboard and beside any photo you share.
• Your settings — home area, theme, sounds, alert choices. Kept so the site behaves the same next time.
• What you have caught, and when — the game: badges, XP, streaks, stickers, leagues.
• Your logbook — entries, notes and up to 200 photos. Private to you unless you choose to share a photo.
• Junior profiles — a name and an icon for each child, and what they have caught. See WHAT FLYABOO KNOWS ABOUT YOU, written for the child it is about.
• Alerts — if you turn on push notifications, the address your browser gives us to send them to.
• Feedback and complaints — what you wrote, and how to reply to you.
• Sign-in sessions — which browsers are signed in, so you can sign them out.
• Ordinary server logs — kept briefly to find faults and stop abuse.

Flyaboo never asks your age, your address, your phone number or your real name, and you should not put them into any box here. If you add your home area it is a rough point you choose, not your address, and it is used only to work out what is overhead.

• Performing a contract with you — your account, your logbook, your catches. Without these there is no service to give you.
• Legitimate interests — keeping Flyaboo working, safe and free of abuse: server logs, rate limits, moderation of shared photos, and acting on reports.
• Consent — push alerts and the occasional email update, each of which you switch on yourself and can switch off at any time without losing anything else.
• Legal obligation — if we must keep or hand over something, for instance where content is reported to the police.

• Your account and everything in it — until you delete it. Deletion is immediate and complete; nothing is held back for later.
• Aircraft tracks — the detailed position trails behind the map and REPLAY are dropped after 30 days. These are about aeroplanes, not people.
• Sign-in sessions — until you sign that browser out, or delete your account.
• Feedback and complaints — kept while being dealt with and for a reasonable time after, so that an appeal has something to look back at.
• A record that a shared photo was removed — kept after the photo itself is deleted, so there is a record of what was done and why. It holds no copy of the picture.
• Server logs — a short rolling window.

Nobody is sent your personal data. But some things your browser loads come from other people's servers, and loading something from a server tells that server your IP address. Honestly, that is:

• Map tiles — Esri, OpenStreetMap, OpenTopoMap and OpenFreeMap, depending on the base map you pick. Rain radar comes from RainViewer, and only when you switch it on.
• Aircraft photographs — Planespotters.net and Wikimedia Commons, when a plane's card shows one.
• Fonts — none. They used to come from Google, which meant Google saw the IP address of everybody who opened the site. They are now served from Flyaboo itself, so that no longer happens.

Separately, Flyaboo's own server looks things up on your behalf — hexdb.io for aircraft, aviationweather.gov and HangarFox for weather, Open-Meteo for forecasts, adsb.im for routes, and news sites for the news page. Those requests come from the server and carry nothing about you: they only ever ask about an aircraft, an airport or the weather.

Flyaboo runs on a DigitalOcean server in London. Backups stay in the UK. Nothing is sold, and there are no advertising or analytics companies involved at all.

• One cookie: the one that keeps you signed in. It is strictly necessary, which is why there is no cookie banner — there is nothing to ask you about.
• Your browser also remembers your own settings (theme, volume, map layer) on your own device. That never leaves it.
• No tracking cookies, no advertising cookies, no third-party analytics. If that ever changes you will be asked first, properly, with a working "no".

• A photo from a phone usually carries hidden information with it, including the GPS position where it was taken — often somebody's garden or doorstep.
• Flyaboo strips all of that before storing the picture. The GPS position, the camera, the timestamp: gone, and never written to the server at all.
• The rotation is applied to the pixels first, so stripping it doesn't turn your photos sideways.
• Photos are resized and converted to JPEG, which means the original file, with whatever else it held, is never kept.
• Your photos stay private to you unless you share them, and a shared one is checked by an admin before anybody else sees it.

• Your operator name, and your catches on the leaderboard.
• A child's name and icon on the leaderboard — never their picture.
• Photos you choose to share, credited to your operator name. A shared photo is checked by an admin before anybody else sees it, and you can unshare or delete it at any time.
• Spotting spots and league names you add.
• Nothing else. Your email address, your logbook notes, your settings and your private photos are never shown to another user. There is no messaging on Flyaboo, so nobody can contact you through it.

Under UK data protection law you can ask to:

• See what we hold about you, and get a copy.
• Correct anything wrong — most of it you can edit yourself in ACCOUNT.
• Delete your whole account yourself, in ACCOUNT → DELETE MY ACCOUNT. It asks for your password, then removes your account and everything in it — catches, badges, logbook entries and photos, children, alerts and leagues — straight away, with nothing kept for later.
• Object to, or restrict, what we do with it.
• Take it elsewhere in a portable form.
• Withdraw consent for alerts or emails, without losing anything else.

Ask through COMPLAIN OR APPEAL. There is no charge, and the law allows us a month to answer.

• Children use Flyaboo through a grown-up's account. There are no child accounts: a child has no login, no password and no email address.
• A junior profile holds a name, an icon and what they have caught. A picture is optional, defaults to off, and is only ever shown inside your own account.
• Nobody can contact a child through Flyaboo, because nobody can contact anybody.
• WHAT FLYABOO KNOWS ABOUT YOU says all this in words a child can read, and reads itself aloud.
• Deleting a junior profile removes everything of theirs at once.

• Stored as a bcrypt hash. Nobody can read it back — not an admin, not the owner, not somebody who stole the database.
• Never sent in an email and never shown on screen.
• If you think somebody else has it, change it in ACCOUNT and sign out your other browsers.

• If your data is ever exposed, the Information Commissioner's Office is told within 72 hours where the law requires it.
• If it is serious enough to affect you, you will be told directly — not quietly, and not late.