FlightTrace

Privacy Policy

Last updated August 6, 2026.

1. Who We Are

FlightTrace ("FlightTrace," "we," "us," or "our") is operated by Flight Trace LLC, a Delaware limited liability company. FlightTrace provides corporate aviation intelligence — informational and research signals derived from publicly broadcast aircraft movement data.

This Privacy Policy explains how we collect, use, share, and protect personal information when you visit https://flighttrace.co (the "Site"), join our waitlist, or use our services (the "Services"). For questions, contact us at admin@flighttrace.co.

FlightTrace is a US-based service oriented to users in the United States. We do not target or direct our Services to individuals in the European Economic Area ("EEA"), the United Kingdom, or Switzerland. If you are located in the EEA, the UK, or Switzerland and choose to use the Services, the rights described in Section 12 are available to you, and Flight Trace LLC acts as the controller of your personal data.

2. Scope

This policy applies to personal information about visitors to our Site, individuals who join our waitlist, and users of our Services. It does not govern the aircraft movement data we process to provide the Services — see Section 7 for how that data works.

3. Information We Collect

  • Waitlist information — if you join our waitlist, the email address you provide so that we can contact you about access and launch.
  • Account information — name, email address, and login credentials, collected when you register or are invited (managed through our authentication provider, Clerk).
  • Billing information — if you purchase a paid subscription, your billing name, address, and subscription details. Card and payment details are processed directly by our payment processor (Stripe); we do not store full card numbers.
  • Usage and technical data — IP address, device and browser type, pages viewed, features used, timestamps, and similar information, collected automatically through essential cookies and server logs.
  • Communications — messages you send through our contact, support, or waitlist channels, and related metadata.

We do not intentionally collect special categories of data (such as health, biometric, or political information), and we ask that you not send them to us.

4. How We Collect Information

We collect information (a) directly from you (waitlist signup, registration, billing, and communications); (b) automatically as you use the Site (essential cookies, server logs); and (c) from third-party providers that help us deliver the Services (for example, authentication, payment, and security providers).

5. How We Use Your Information, and Our Legal Bases

We use personal information to:

  • operate our waitlist and notify you about access and launch — consent; legitimate interests;
  • provide, operate, and secure the Services — performance of a contract; legitimate interests;
  • process payments and manage subscriptions — contract; legal obligation;
  • communicate with you about your account, support, and service changes — contract; legitimate interests;
  • monitor, analyze, and improve the Site and Services, including preventing fraud and abuse — legitimate interests;
  • comply with legal obligations and enforce our Terms — legal obligation; legitimate interests; and
  • send marketing communications where permitted, which you can opt out of at any time — consent or legitimate interests, as applicable.

The legal bases above are provided for users in the EEA, the UK, and Switzerland. Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.

6. Cookies and Similar Technologies

We use only strictly necessary cookies to operate the Site (for example, authentication and security). We do not use advertising, marketing, or third-party behavioral-tracking cookies, and we do not use third-party web analytics. Because we set only essential cookies, we do not display advertising or build advertising profiles about you. If we introduce any non-essential cookies in the future, we will update this policy and, where required, obtain your prior consent.

Do Not Track and Global Privacy Control. Because we do not track you across third-party websites, do not use third-party analytics or advertising technologies, and do not sell or share personal information, there is no cross-site tracking for browser "Do Not Track" or Global Privacy Control signals to opt out of. If our practices ever change, we will honor these signals where required by law and update this policy first.

7. The Flight Data We Process

The core of our Services is derived from Automatic Dependent Surveillance–Broadcast (ADS-B) data — position information that aircraft transmit publicly over an open, unencrypted standard — together with publicly available aircraft registration information. Aircraft registration records are public government records published by the Federal Aviation Administration. This data concerns aircraft and the publicly traded companies associated with them, and is used to produce observational research signals. It is not collected from you, is not used to profile Site users, and is not combined with your account information.

The Services analyze aircraft movements and company- or fleet-level activity. They are not designed to identify, track, or infer the activities of any individual person (such as a passenger, pilot, or executive), and we mask aircraft registration identifiers where we display them in the product interface. Company–aircraft associations are inferred from public records and flight activity and are treated as provisional rather than confirmed.

8. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only as follows:

8.1 Service providers (subprocessors).

We use the following third parties to process data on our behalf, under contract and only as needed to provide the Services:

  • Clerk — Authentication and account management (name, email, credentials)
  • Stripe — Payment processing if you purchase a paid subscription (billing details; card data handled directly by Stripe)
  • MailerLite — Waitlist and marketing email (email addresses you provide to join the list)
  • Resend — Transactional and support email (email address and message content)
  • Cloudflare (Turnstile) — Bot protection on account sign-up, provided through our authentication provider (IP address and browser signals)
  • Mapbox — Interactive maps (loads in your browser, which sends your IP address to Mapbox)
  • Google Cloud / BigQuery — Cloud infrastructure and data warehouse (flight data; operational logs)
  • Vercel — Application hosting and delivery

Our Services also connect to our own backend data API (operated for FlightTrace on Google Cloud Run), which receives your authenticated session identity to deliver data to you. We do not use any advertising networks, advertising pixels, or third-party analytics providers.

8.2 Legal and safety.

We may disclose personal information to comply with law, respond to lawful requests, or protect our rights, our users, and the public.

8.3 Business transfers.

We may disclose personal information in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

9. International Data Transfers

We are based in the United States, and our providers may process data in the United States and other countries. If you access the Services from the EEA, the UK, or Switzerland, your personal information will be transferred to the United States. Where such transfers occur, we rely on appropriate safeguards offered by our providers, such as the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant) or other lawful transfer mechanisms made available under our providers' data processing terms.

10. Data Retention

We retain personal information for as long as needed to provide the Services and for legitimate business or legal purposes. In general: waitlist emails are retained until you ask us to remove them or until we close the waitlist; account data is retained for the life of your account and for a reasonable period afterward; and billing records are retained as required by tax and accounting law. Routine operational and diagnostic logs are generally retained for up to 30 days; limited security and audit logs are retained longer where required for security and compliance. When information is no longer needed, we delete or anonymize it. Where we maintain de-identified information, we will maintain and use it only in de-identified form and will not attempt to re-identify it, except as permitted by law to confirm that our de-identification processes are effective.

11. Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit and at rest, access controls, authentication through a reputable identity provider, and hosting with reputable cloud providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Your Rights

Depending on where you live, you may have the right to:

  • access, correct, update, or delete your personal information;
  • restrict or object to certain processing, and request portability;
  • withdraw consent where processing is based on consent; and
  • lodge a complaint with a data protection authority.

EEA / UK / Switzerland (GDPR).

You have the rights above and may contact your local supervisory authority. We act as the controller of your personal data. Because we do not target our Services to the EEA, the UK, or Switzerland, we have not appointed an Article 27 representative; if our practices change, we will update this policy accordingly.

California (CCPA/CPRA).

California residents have the right to know, access, correct, and delete their personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law, so no "Do Not Sell or Share My Personal Information" action is required. We will not discriminate against you for exercising your rights.

California "Shine the Light."

We do not share personal information with third parties for those third parties' own direct-marketing purposes.

To exercise any right, contact us at admin@flighttrace.co. We will verify your request and respond within the time required by applicable law.

Authorized agents. Where permitted by law, you may designate an authorized agent to submit a privacy request on your behalf. We may require the agent to provide proof of your authorization and may ask you to verify your identity directly with us.

Appeals. If we decline to take action on your privacy request, we will explain why. Depending on where you live, you may have the right to appeal our decision by replying to our response or by emailing admin@flighttrace.co with the subject line "Privacy Appeal." We will respond to your appeal within the time required by applicable law and explain the reasons for our decision. If your appeal is denied, residents of certain states (for example, Virginia, Colorado, and Connecticut) may contact their state Attorney General to submit a complaint.

13. Children's Privacy

The Services are intended for business and professional use and are not directed to children. You must be at least 18 years old to use the Services, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with information, contact us and we will delete it.

14. Third-Party Links

The Site may link to third-party sites or services we do not control. This policy does not apply to them; please review their privacy policies.

Community space. Your subscription includes access to our members-only community, currently hosted on Discord. Joining is optional. If you join, you interact with Discord directly under Discord's own terms and privacy policy, and anything you provide or post there — including your Discord account details — is handled by Discord, not by us. We do not receive your Discord account information, and we do not link your Discord identity to your FlightTrace account. If we later offer account linking, we will update this policy before doing so.

15. Changes to This Policy

We may update this policy from time to time. We will post the updated version with a new "Last updated" date and, where required, provide additional notice. Continued use of the Services after changes take effect constitutes acceptance.

16. Contact Us

Flight Trace LLC

Privacy contact: admin@flighttrace.co

Mailing address: Flight Trace LLC, 8 The Green, Suite B, Dover, DE 19901