This Privacy Policy explains how we collect, use, and protect your information when you use our application.
We are committed to ensuring the privacy and security of your data in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

We only process what the service needs, we do not sell personal data and we do not share it for advertising:

• Your account: name, email address, language, hashed password and two-factor settings, to provide the service (contract). Kept until you delete the account.
• Your logbook: the flights and simulator sessions you enter: dates, airports and times, aircraft and registrations, flight and pilot-function times, take-offs and landings, remarks, and the names you write in them (pilot in command, crew), to keep your logbook (contract). Kept until you delete the entries or the account.
• Pilot preferences: the default values that pre-fill your entries (pilot in command, fleet and registrations, home airports, kind of operations, crew role, simulator), to provide the service (contract). Kept until you delete the account.
• Security log: email address, IP address and browser for sign-ins, registrations, password resets, account changes and administration actions, to protect accounts and investigate abuse (legitimate interest). Kept 90 days.
• Trusted devices: browser, IP address and dates of the browsers allowed to skip the two-factor code (legitimate interest). Kept for the period you choose, 28 days at most.
• Sessions: IP address and browser of an open session. Deleted after 120 minutes without activity.
• Emails: the codes and links we send to your address, through our email provider.
• Third-party services: your browser loads the charts library (Chart.js) from jsDelivr and the background of the flight map from OpenFreeMap, which therefore receive your IP address and, for the map, the area displayed, like any website you visit; nothing else from your account or your logbook is sent to them.
• Technical logs: errors and security events, used to keep the service running. Kept 14 days.

This website only uses the cookies it needs to work; they cannot be switched off:

• XSRF-TOKEN: Used to prevent cross-site request forgery attacks.
• Session: Contains encrypted session data to maintain your logged-in state and other session-related information.
• locale: Remembers the language you chose, for one year.
• two_factor_trusted_…: Lets a browser skip the two-factor code for the period you chose (28 days at most); revocable in Settings › Security.

These cookies do not track your browsing activity on other websites.

• The site and its data are hosted in the European Union by our hosting provider.
• We implement appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure, or destruction of data.

You have the following rights over your personal data:

• Right to Access: You can obtain the personal data we hold about you: Settings › My data › Download my data, or on request by email.
• Right to Erasure (“Right to be Forgotten”): You can delete your account and your personal data: Settings › My data › Delete my account, or on request by email (also if you have no account, for instance if a pilot wrote your name in their logbook). Security-log entries about you are then anonymised.
• Right to Object: You can object to the processing of your personal data.
• Right to Data Portability: The download is a structured, commonly used and machine-readable file (JSON); your logbook can also be exported as CSV from the Logbook page.
• Right to Complain: You have the right to lodge a complaint with a supervisory authority.

For any other request, please contact us using the email address below.

We may update this Privacy Policy from time to time.
We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

If you have any questions about this Privacy Policy, please contact us:

• By email: logbooks@lambda-aero.com

---

Last Updated: September 23, 2026