Privacy Policy

01 Overview

FRNAS Aviation Platform ("FRNAS", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

This Policy applies to all users of the FRNAS Platform — whether you visit as a guest, create an account, or sign in through a third-party provider such as Google or Apple.

In plain language: We collect only what we need, use it to run the platform, never sell it, and you can request deletion at any time.

02 What We Collect

Data Type	Examples	Source
Account Information	Name, email address, password (hashed)	Provided by you at registration
Third-Party Auth	Name, email (from Google/Apple)	OAuth provider on sign-in
Usage Data	Pages visited, search queries, features used	Automatically collected
Device Information	Browser type, operating system, screen resolution	Automatically collected
Log Data	IP address, timestamps, referring URLs	Server logs

We do not collect payment information (we have no paid features), government IDs, or any special category personal data.

03 How We Use Your Data

We use the information we collect to:

Provide the Platform — authenticate you, maintain your account, and deliver aviation data;
Improve the Platform — analyze usage patterns to understand what content is most useful;
Communicate with you — send account-related notifications (password resets, policy updates);
Ensure security — detect and prevent fraud, abuse, and unauthorized access;
Legal compliance — fulfill our legal obligations and enforce our Terms of Service.

We do not use your data for targeted advertising, profiling, or automated decision-making that affects your rights.

04 Google Sign-In

FRNAS offers Google Sign-In as an optional, convenient way to create and access your account. Here is exactly what happens when you use it:

What Google shares with us: Your name and email address only. We do not receive your Google password, contacts, calendar, or any other Google data.

Google's role: Authentication is handled entirely by Google's servers using OAuth 2.0. FRNAS never sees your Google password.

Read Google's Privacy Policy → | Manage Google account permissions →

You can revoke FRNAS's access to your Google account at any time through your Google Account settings. Revoking access will not delete your FRNAS account, but you will need to set a password to continue signing in.

Google's use of information received by FRNAS via Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

05 Cookies & Local Storage

FRNAS uses the following browser storage mechanisms:

Type	Purpose	Duration
Session Cookie	Keep you signed in during a browsing session	Until browser closes
Auth Token	"Remember me" persistent sign-in	30 days
LocalStorage	UI preferences (last visited section, filters)	Indefinite / until cleared

We do not use advertising cookies, tracking pixels, or third-party analytics beyond what is necessary to run the Platform.

06 Data Sharing

We do not sell, trade, or rent your personal data. We may share your information only in these limited circumstances:

Service providers — companies that help us operate the Platform (hosting, email delivery), bound by data processing agreements;
Legal requirements — when required by law, court order, or governmental authority;
Business transfers — if FRNAS is acquired or merged, your data may transfer as part of that transaction, with prior notice to you;
With your consent — any other sharing will only happen with your explicit permission.

07 Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

Account data — retained until you delete your account;
Usage logs — retained for 90 days, then anonymized;
Backup copies — may persist for up to 30 days after deletion requests.

To request deletion of your account and data, contact us through our contact page.

08 Security

We implement industry-standard security measures to protect your personal data:

HTTPS encryption for all data in transit;
Passwords stored using bcrypt hashing (never in plaintext);
OAuth 2.0 for third-party sign-in (your password never leaves Google/Apple);
Regular security reviews of our codebase and infrastructure.

No method of transmission over the internet is 100% secure. If you become aware of a security issue, please contact us immediately through our contact page.

09 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access — request a copy of the personal data we hold about you;
Correction — request correction of inaccurate or incomplete data;
Deletion — request deletion of your personal data ("right to be forgotten");
Portability — receive your data in a machine-readable format;
Objection — object to processing based on our legitimate interests;
Withdrawal of consent — withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us through our contact page. We will respond within 30 days.

10 Children's Privacy

FRNAS is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete that information promptly.

11 Policy Changes

We may update this Privacy Policy periodically. When we do, we will update the "Last updated" date at the top and, for material changes, notify registered users by email at least 14 days before the changes take effect.

Your continued use of FRNAS after the effective date of any changes constitutes your acceptance of the revised Policy.

12 Contact Us

For privacy-related inquiries, data requests, or to report a concern:

Contact page: frnas/contact
Response time: Within 30 days for formal data requests

Table of Contents