Privacy Policy

The data controller for personal data processed via PlaneDex is the PlaneDex maintainers. Contact: privacy@planedex.org.

• Account data— email, display name, optional bio and avatar. Used to create and operate your account (legal basis: contract).
• Authentication metadata— sign-in timestamps, IP address, user-agent. Used for security and abuse prevention (legal basis: legitimate interest).
• Content you upload— photos and the metadata you attach (registration, location, time). EXIF GPS coordinates are stripped before storage; we use them only once at upload time to suggest a nearby airport.
• Activity— likes, follows, comments, saved searches. Used to operate the social features (legal basis: contract).
• Billing data— for paid plans we store the subscription status and a token from Mollie. Card / SEPA details are processed by Mollie and never reach our servers.
• Analytics— aggregated, anonymised page-view counts, only if you consented (legal basis: consent).
• Advertising— if you consented, Google AdSense may set cookies to show personalised ads. Without consent we show non-personalised house ads only.

• Supabase— authentication and signed storage URLs (EU region).
• Cloudflare R2 + Cloudflare CDN— photo blob storage and global delivery.
• Mollie— payment processing for Pro and API plans.
• Google AdSense— advertising, only with consent.
• Hosting— the application runs on a self-managed Linux server in the EU.

Account data is kept while your account exists and for up to 30 days after deletion (in backups). Server access logs are kept for 14 days. Billing records are kept for 7 years to comply with Dutch tax law.

We try to keep data in the EU. Cloudflare and Google may transfer data outside the EEA under the EU Standard Contractual Clauses.

You have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. You can exercise most of these directly from account settings (download your data, delete your account). For anything else, email privacy@planedex.org. You also have the right to lodge a complaint with your local supervisory authority (in the Netherlands, the Autoriteit Persoonsgegevens).

See the Cookie Policy for the list of cookies we use and how to change your consent.

We’ll post any material changes to this policy on this page and, for registered users, notify you by email.