Privacy Policy & Terms of Service

The data controller responsible for processing your personal data is:

• Roman Magerko
• roman.magerko@gmail.com
• Location: Slovakia / European Union

When you create an account or use the Service, we may collect the following personal data:

• Name (optional)
• Nickname (publicly visible)
• Email address
• Password (securely stored)
• User-generated content (e.g. comments, uploaded photos)
• Google account information — name and email address (only if you choose to sign in with Google, see Section 2a)
• Apple account information — name, email address (or an Apple private relay address) and an Apple user identifier (only if you choose to sign in with Apple in the iOS app, see Section 2c)
• Newsletter subscription data — email address and subscription details (only if you subscribe, see Section 2b)
• Push notification subscription — a technical device/browser identifier (only if you allow notifications, see Section 5)
• IP address — used briefly to show prices in your local currency; we do not store it for this purpose (see Section 5)

We do not collect any additional personal data beyond what is necessary for the operation of the Service.

In addition to creating an account directly, you may sign in to the Service using "Sign in with Google."

When you use this option, Google shares the following information with us, based on the basic profile scope you approve on Google's consent screen:

• Your name
• Your email address

We do not request or receive access to your Gmail, Google Contacts, Drive, Calendar, or any other Google service.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This data is used solely to create and authenticate your Air Codes account — it is never used for advertising and never sold or shared with third parties beyond what is necessary to operate the Service.

You can review or revoke Air Codes' access to your Google account at any time at myaccount.google.com/permissions. Google's own handling of your data is described in the Google Privacy Policy.

You can subscribe to the free Air Codes daily briefing — a once-a-day email with a selection of the latest aviation crash, accident and news posts from the Service. Subscribing is optional and does not require an account.

Double opt-in. After you enter your email address, we send you a confirmation email. You are added to the list only after you click the confirmation link. Unconfirmed sign-ups are automatically deleted after 7 days.

From your account. If you have an Air Codes account, you can also switch the newsletter on or off in your account settings. Because your account email address is already verified, switching it on subscribes you directly, without a separate confirmation email. You can switch it off there at any time.

When creating an account. The sign-up form has an optional, unticked "Send me the daily aviation briefing" box. If you tick it, you are subscribed only once you activate your account through the activation email.

For the newsletter we store:

• Your email address
• The date and time of your sign-up and of your confirmation
• The IP address used at sign-up, kept as a record of your consent
• The date the last newsletter was sent to you

Unsubscribing. Every newsletter contains an unsubscribe link. When you unsubscribe, your email address and all related newsletter data are deleted immediately. Your newsletter subscription is separate from your account: deleting your account does not unsubscribe you, and unsubscribing does not affect your account.

We do not use tracking pixels, open tracking or click tracking in our emails, and your email address is never sold, rented or shared for marketing purposes. Images in the newsletter may be loaded from the original image sources (for example Wikimedia Commons or Flickr) when you open the email.

In the Air Codes iOS app, you may also sign in using "Sign in with Apple."

When you use this option, Apple shares the following information with us, based on what you approve on Apple's sign-in screen:

• Your name — as you choose to share it; Apple provides it only the first time you sign in
• Your email address — either your real email address or, if you choose "Hide My Email", a unique random address created by Apple (ending in @privaterelay.appleid.com) that forwards to your real inbox
• A unique user identifier assigned by Apple, used to recognise your account when you sign in again

If you use Hide My Email, we never see your real email address. Emails we send you — such as account emails or the newsletter, if you subscribe — are delivered through Apple's Private Email Relay service.

This data is used solely to create and authenticate your Air Codes account. It is never used for advertising and never sold or shared with third parties beyond what is necessary to operate the Service. When you delete your Air Codes account, we also revoke the Sign in with Apple authorization.

You can stop using Sign in with Apple with Air Codes at any time in your Apple Account settings on your device or at account.apple.com. Apple's own handling of your data is described in the Apple Privacy Policy.

Your personal data is processed for the following purposes:

• Creating and managing user accounts
• Authenticating accounts via Sign in with Google or Sign in with Apple, where chosen
• Enabling user interaction (comments, content sharing)
• Maintaining security and functionality of the Service
• Sending the daily newsletter, where you have subscribed
• Sending push notifications, where you have allowed them
• Showing prices in your local currency (EUR or USD)

Legal basis under GDPR: Article 6(1)(b) — processing is necessary for the performance of a contract (providing the Service). Where you choose to sign in with Google or Apple, this also relies on Article 6(1)(a) — your consent, given via the Google or Apple sign-in screen. The newsletter is sent only on the basis of Article 6(1)(a) — your consent, confirmed by double opt-in, which you can withdraw at any time by unsubscribing. Push notifications are sent only on the basis of Article 6(1)(a) — your consent, given when you allow notifications in your browser or device, which you can withdraw at any time in your browser or device settings. Detecting your country to show prices in the right currency relies on Article 6(1)(f) — our legitimate interest in displaying correct prices.

Any content you upload (such as comments or photos) may be visible to other users. You are responsible for ensuring that:

• You have the right to publish such content
• The content does not violate any laws or third-party rights

We reserve the right to remove content that violates applicable laws or community standards.

We do not sell or share your personal data for marketing purposes. Your data may be processed by trusted third parties strictly for technical operation of the Service, such as:

• Hosting provider WebSupport — EU (including the mail server used to send account and newsletter emails)
• Google LLC — used solely to provide the optional Sign in with Google login feature
• Apple Inc. — used solely to provide the optional Sign in with Apple login feature in the iOS app and, if you use Hide My Email, to forward our emails to you through Apple's Private Email Relay
• OneSignal, Inc. (USA) — used solely to deliver push notifications if you allow them. OneSignal receives a technical identifier of your browser or device (a push subscription ID), basic technical data such as browser and device type, and the time of your subscription. It does not receive your password and is not used for advertising.
• ip-api.com — when you view prices, your IP address is sent to this geolocation service to determine your country, so prices can be shown in EUR or USD. Only the resulting currency is used; we do not store your IP address for this purpose.

Push notifications. Notifications are optional and are only enabled after you allow them in your browser or device. You can turn them off at any time in your browser or device settings; your push subscription is then no longer used.

All such processing is limited to what is necessary and complies with GDPR requirements. Where a provider processes data outside the European Union (such as OneSignal in the USA), the transfer is covered by that provider's data processing terms with appropriate safeguards under GDPR.

• Your account data is stored within the European Union
• Push notification identifiers are processed by OneSignal, as described in Section 5
• Passwords are securely hashed using modern cryptographic algorithms
• Appropriate technical and organizational measures are in place to protect your data

Your data is stored as long as your account is active. You may delete your account at any time. Upon deletion, all associated data is permanently erased.

Accounts inactive for 2 years are automatically deleted without backup or archival.

Newsletter data is kept until you unsubscribe. Unconfirmed newsletter sign-ups are deleted after 7 days.

Under the General Data Protection Regulation, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict processing
• Request data portability
• Object to processing

You can get a copy of all data we store about you at any time with the E-mail me my data button in your account settings. It is sent to your account e-mail address, with a machine-readable file attached. For any other request, contact us at the address below.

You also have the right to lodge a complaint with your local data protection authority (Slovakia: Office for Personal Data Protection).

The Service uses only essential cookies required for proper functionality, such as:

• Maintaining login sessions
• Basic site operation
• Remembering your day/night (dark mode) choice — the colorPreference / colorPreferenceMobile cookie. It stores only the value "dark" or "light", is set when you change the theme, stays on your device, and contains no personal data.

No tracking, analytics, or marketing cookies are used.

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Any changes will be published on this page.

If you have any questions, requests, or concerns regarding your personal data, you can contact: roman.magerko@gmail.com

The Service allows users to:

• Create an account
• Share content (e.g. comments, photos)
• Interact with other users

You agree to use the Service only in compliance with applicable laws and these Terms.

• You are responsible for maintaining the confidentiality of your account credentials
• You are responsible for all activity under your account
• You must provide accurate information when registering
• You may not impersonate other individuals or entities

We reserve the right to suspend or terminate accounts that violate these Terms.

You retain ownership of any content you upload (e.g. photos, comments). By uploading content, you grant the Service a non-exclusive, worldwide, royalty-free license to:

• Store
• Display
• Distribute that content within the platform

You are solely responsible for your content.

You agree not to upload or share content that:

• Violates any laws or regulations
• Infringes intellectual property rights
• Contains hate speech, harassment, or threats
• Contains explicit or inappropriate material
• Belongs to another person or company without permission

We reserve the right to remove any content that violates these rules.

We may:

• Remove content without prior notice
• Suspend or terminate accounts
• Restrict access to parts of the Service

This is done to maintain safety, legality, and proper functioning of the platform.

You may delete your account at any time. Upon deletion, your data will be permanently removed (as described in the Privacy Policy).

We may suspend or terminate your account if you violate these Terms.

The Service is provided "as is" without guarantees of:

• Continuous availability
• Error-free operation

We may modify or discontinue parts of the Service at any time.

To the maximum extent permitted by law:

• We are not responsible for user-generated content
• We are not liable for any damages resulting from use of the Service
• Use of the Service is at your own risk

Your personal data is handled in accordance with our Privacy Policy.

We may update these Terms at any time. Continued use of the Service after changes means you accept the updated Terms.

These Terms are governed by the laws of Slovakia / European Union.

For any questions regarding these Terms, contact: roman.magerko@gmail.com