Privacy Policy

Effective date: 26 August 2026

Aviatory is an open platform for aviation engineering, published at aviatory.org and control.aviatory.org. This policy explains what information we collect from visitors and community members, why, and what you can do about it.

Contact form. When you write to us through the contact page, we collect your name, email address, organisation (if you give one), and the content of your message. We use this only to reply to you.

Comments. If you leave a comment on a writing, we collect your name, email address and the comment text. Your email address is never shown publicly — only your name and comment appear on the page.

Server logs. Like most websites, our hosting provider and Cloudflare (see below) keep standard technical logs of requests — IP address, browser user agent, timestamp, requested page. These exist for security and reliability, not for tracking, and are kept only as long as needed for that purpose.

Admin accounts. Aviatory · Control, the panel behind the site, requires an account for staff who publish and moderate content. Those accounts are internal — they are not open for public sign-up, and this section does not apply to ordinary visitors.

We do not run visitor analytics or advertising trackers on aviatory.org. We do not sell, rent or trade any information to third parties, ever.

The public site does not set tracking cookies. Aviatory · Control, the admin panel, sets a session cookie so a signed-in operator stays signed in — this is functional, not tracking, and only applies to staff accounts.

Cloudflare sits in front of both aviatory.org and control.aviatory.org for security and performance (DDoS protection, caching, and the Turnstile challenge used on public forms). Cloudflare processes connection metadata as part of that service. See Cloudflare's privacy policy for details.

Cloudflare Turnstile runs a lightweight, privacy-preserving challenge on the contact form and on comment submissions to filter automated spam, without the tracking cookies or puzzles a traditional CAPTCHA uses.

Contact messages and comments are kept for as long as they remain relevant to the conversation or the page they were left on. You can ask us to delete either at any time — see "Your rights" below.

You can ask us, at any time, to:

• tell you what personal data we hold about you,
• correct it if it's wrong,
• delete it.

Write to [email protected] for any of these, and we'll act on it without unnecessary delay.

If this policy changes in a way that matters, the effective date at the top will change and, where the change is significant, we'll say so on the site's changelog.

Questions about this policy: [email protected]. Everything else: [email protected].