Your data, in plain English.

SkyFeed is a planning aid — never the only source for a go / no-go decision. The website collects an email address only if you subscribe, and uses Google Analytics for anonymized, aggregated traffic measurement (pageviews, with IP truncated by Google). The iOS app does not transmit user-identifying data to any server we control. No ad networks, no remarketing, no audience-extension. Contact details are in Section 08.

• A. Planning aid — not an official briefing
• B. Email only if you subscribe
• C. Anonymized Google Analytics only
• D. App data stays on your device

Not for primary flight use.

That paragraph appears in the app on every first launch and in the footer of every page on this website. Read it. Treat the app and the website as a planning aid for the go / no-go decision, not the final authority. The final authority is your official preflight briefing through Flight Service (1-800-WX-BRIEF in the US, or the equivalent in your jurisdiction), and your own judgment.

Three things: an email address if you actively submit the subscribe form; standard server access logs that any web server keeps; and Google Analytics 4 pageview events with IP anonymization. None of it is sold to anyone, and beyond Google's role as the GA service provider, nothing is shared with third parties.

Email address

Only if you submit the subscribe form on the home page, the features page, or in a future blog post. We use it to send occasional product updates and aviation-weather tips — "occasional" means once or twice a month at most. Unsubscribe with one click. Stored in a Postgres database hosted on Railway in the United States.

Server access logs

IP address, user-agent string, request timestamp, and the URL requested. Used for security, debugging, and abuse prevention (rate-limiting). Logs are not associated with any identity unless you also subscribe with the same browser session. Retained for 30 days, then deleted.

Google Analytics 4

Anonymous pageview events with IP truncated by Google on collection. Used to understand which pages and tools see traffic. Standard GA4 first-party cookies (_ga, _ga_*) with Google's default retention. No remarketing, no Google Signals, no audience-extension features. Google's own privacy terms apply as the service provider.

The default position is: only third-party services we deliberately need. Google Analytics 4 is one of them — details in Section 03. Everything else is off: no Plausible, no Mixpanel, no Segment, no Sentry, no Hotjar. No advertising pixels. No social-media trackers. No remarketing or audience-extension features inside GA. No fingerprinting. If anything in this list changes for a legitimate reason, this section and the at-a-glance summary will update first.

• 01 No Plausible, Mixpanel, Segment, or other analytics beyond GA4
• 02 No remarketing or audience-extension features inside GA
• 03 No crash reporters (no Sentry, no Bugsnag) on the website
• 04 No advertising pixels
• 05 No social-media share trackers
• 06 No fingerprinting
• 07 No selling your data; GA acts only as a service provider

The app is built to keep your data on your device. Your watched stations, your trips, your personal minimums, and your aircraft list are all stored locally in your iPhone or iPad — never on a server we control. The only network traffic the app generates is anonymous HTTP requests to public aviation-weather APIs, and those requests do not carry any user-identifying header.

What's stored locally

Watched stations, trips, aircraft list, personal minimums profile, app preferences. None of it leaves the device. iCloud sync is not enabled in v1.

Network traffic

NOAA Aviation Weather Center (METARs / TAFs); FAA NOTAM API; NOAA NEXRAD (US radar); RainViewer (worldwide radar). All anonymous, no user-identifying header. Airport catalog from OurAirports is bundled with the app — no network call.

System frameworks

CoreLocation only on explicit "Nearby" search — never in the background. UNUserNotificationCenter for alerts you configure. BGTaskScheduler for periodic refresh. Standard iOS frameworks, all on-device.

Third-party SDKs

None. No analytics SDK, no ad SDK, no crash reporter, no audience measurement, no attribution framework.

Under GDPR (Europe), UK GDPR, the CCPA (California), and most equivalent regimes elsewhere, you can ask what we have on you, ask for a copy of it, ask for it to be corrected, or ask for it to be deleted. Because the only thing we have on you is an email address — if you subscribed — these requests are usually one short reply. Send an email; we respond within 30 days.

• 01 Right to access — ask for a copy of your data
• 02 Right to rectification — ask us to fix it
• 03 Right to erasure — ask us to delete it
• 04 Right to object — withdraw consent at any time
• 05 Right to portability — get your data in a portable format
• 06 Right not to be discriminated against — applies to CCPA

How long, who can use it, what changes.

Retention

Email until you unsubscribe; logs for 30 days.

When you unsubscribe, the row is kept with an `unsubscribed_at` timestamp so we don't accidentally re-add you if the same address comes through again. You can ask for full deletion any time — see Section 06.

Children

Not directed at children under 16.

SkyFeed is built for general aviation pilots; piloting an aircraft is regulated to adult ages in every jurisdiction we ship to. We do not knowingly collect data from anyone under 16.

Changes

Material changes go to subscribers first.

We update the "last updated" date at the top of this page whenever it changes. A material change — new collection, new third party, retention change — is announced to subscribers in advance.

One email address handles everything — privacy requests, App Store reviewer questions, bug reports, general feedback. Plain text is fine; no special subject line required.