Privacy Policy
Last updated: June 2026
Your privacy matters to us. This policy explains what data we collect, why we collect it, and how we protect it. We keep things minimal — we only collect what we need to run the service.
Data Controller: SkyInfo · [email protected]
1. Data We Collect
We collect minimal data necessary to operate this service. When you use the airport selector, your browser geolocation is requested only with your explicit consent and is never stored on our servers. Your API key preference is stored locally in your browser's localStorage. We do not collect names, email addresses, or any personal identifying information unless you voluntarily submit them via the Contact form.
2. Third-Party Services
Flight data is fetched from a third-party real-time flight data provider. When you request flight information, your query parameters (airport IATA codes, dates, flight types) are forwarded to that provider. Airport and country reference data is served entirely offline via the airportsdata Python package — no external requests are made for those lookups.
3. Cookies & Local Storage
SkyInfo does not use advertising or tracking cookies. We store your chosen colour theme (dark/light) in localStorage so it persists across sessions. No cross-site tracking, analytics SDKs, or third-party advertising scripts are embedded in this application.
4. Server-Side Data
Our FastAPI backend logs incoming HTTP requests (IP address, endpoint path, response status, timestamp) in standard uvicorn access logs for debugging and operational purposes. These logs are stored locally and are not shared with third parties. No flight query history is persisted against individual users.
5. Security
API requests between your browser and our backend are protected by an API key header (X-API-Key). All communication uses HTTPS in production (Railway). We apply rate limiting to prevent abuse. We do not store passwords; there is no user account system with sensitive credentials.
6. Your Rights
As we hold no personally identifiable information about you, there is typically no personal data to access, correct, or delete. If you submitted a contact request and wish to have that information removed, email us at [email protected] and we will action your request within 30 days.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by updating the date at the top of this page. Continued use of the service after changes constitutes acceptance of the revised policy. Material changes will be noted prominently on the home page.
Privacy Questions?
Email us and we will respond within 5 business days.
See also our Terms & Conditions and Accessibility Statement.