Privacy policy

Your flying data is yours and stays on your device. This site has no accounts, no login and no database of users, and we could not look at your ledger if we wanted to. The only things described on this page are a page-view counter on this website and an optional Google Drive backup that you control.

The app runs entirely in your browser. Flights, tickets, costs and anything you import are stored in your browser’s own storage, on your device. Receipts and CSV files you import are read right there; they are never uploaded, because there is nothing to upload them to.

If you run the app on your own computer instead, the ledger is a database file on your disk, and the built-in server accepts connections only from that machine.

Because the browser holds the data, clearing this site’s data in your browser also deletes the ledger. The backup and export buttons in Settings exist for exactly that reason.

Sync is off until you set it up, and nothing is ever sent on its own. When you press sync, the app copies your backup file into a private folder of your own Google Drive that only this app can see. If you turn on automatic backup, the app repeats that same copy for about an hour after each sync you started yourself.

The app asks Google for the narrowest Drive permission there is: access to its own app folder, nothing else in your Drive. Your data goes straight from your browser to Google; it never passes through our servers, because there are none. The app also asks Drive once for the email address of the account you picked, so Google stops asking you which account on every sync. That email is kept in your browser and nowhere else.

To stop syncing, press “Forget connection” in Settings. That removes everything sync kept in your browser, but deletes nothing from your Drive. You can take the app’s access away at myaccount.google.com/connections, and delete the stored backup in Google Drive under Settings, then “Manage apps”.

flightledger.net counts page views and a few feature events by name only. That is how we know whether anyone visits and uses the app. The counter is Swetrix, a GDPR-compliant analytics tool running on our own server, and it works without cookies. That is why there is no cookie banner here: there is nothing to consent to. It does not identify you, does not follow you to other sites, and nothing about your ledger is in it. There are no ads and no third-party trackers.

The counter runs only on flightledger.net itself. A copy you run on your own machine, or host yourself somewhere else, sends nothing at all.

If this policy changes, the date at the top changes with it. Questions go to vlvovch@gmail.com.