Privacy Policy — LandingAtlas

1. Who We Are

LandingAtlas ("we", "us", "our") is an aviation intelligence platform operated from Helsinki, Finland. We provide airport profiles, airline data, route maps, and personal travel tools including the Captain's Logbook and Aviation Passport.

As data controller, we determine how and why your personal data is processed. Questions about this policy can be directed to privacy@landingatlas.

2. Data We Collect

We collect only what is necessary to provide our services:

Data	Source	Purpose
Email address, display name	Account registration (Google or email/password)	Authentication, account management
Profile photo URL	Google Sign-In (optional)	Display in your profile
Flight logbook entries	Entered by you	Captain's Logbook & Aviation Passport features
Email address	Newsletter sign-up (optional, separate consent)	Sending LandingAtlas updates
Anonymous page visit data	Analytics (Plausible — cookieless)	Understanding which content is useful

We do not collect payment data, government IDs, or sensitive personal categories.

3. Legal Basis (GDPR Art. 6)

Contract performance (Art. 6(1)(b)): Processing your account data and logbook entries to deliver the service you signed up for.
Consent (Art. 6(1)(a)): Sending newsletter emails. You may withdraw consent at any time via the unsubscribe link in any email.
Legitimate interests (Art. 6(1)(f)): Cookieless analytics to improve the platform. No personal data is shared with analytics providers.

4. Data Processors & Third Parties

We work with the following processors under data processing agreements. We do not sell your data to any third party.

Processor	Role	Data Location
Google Firebase (Auth + Firestore)	Authentication, logbook storage	EU (europe-west / eur3)
Vercel	Web hosting & edge functions	EU edge nodes
Resend	Transactional & newsletter email	EU (email delivery)
Plausible Analytics	Cookieless, privacy-first analytics	EU (Germany)

5. Data Retention

Account data & logbook: Retained as long as your account is active. Deleted within 30 days of account deletion request.
Newsletter subscriptions: Retained until you unsubscribe. Removed within 7 days of unsubscribe request.
Analytics data: Plausible retains aggregate (non-personal) data indefinitely. No personal data is stored by our analytics provider.

6. Your Rights

Under GDPR, you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — correct inaccurate or incomplete data
Erasure — request deletion of your account and all associated data
Portability — receive your logbook data in a machine-readable format (JSON/CSV)
Objection — object to processing based on legitimate interests
Withdraw consent — for newsletter subscriptions, at any time

To exercise any of these rights, email privacy@landingatlas. We will respond within 30 days. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

7. Cookies

LandingAtlas uses minimal cookies. Our analytics provider (Plausible) is cookieless and does not set any tracking cookies.

Cookie	Type	Purpose	Duration
Firebase Auth session	Essential	Keep you signed in	Session / 1 year
la_cookie_consent	Essential	Remember your cookie preference	1 year

No third-party advertising or tracking cookies are set.

8. Children

LandingAtlas is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to registered users and noted with an updated "Last updated" date at the top of this page. Continued use of LandingAtlas after changes constitutes acceptance of the revised policy.