This page says what BlueSkies keeps about you, why, and for how long. BlueSkies is a planning aid for private pilots; it holds no more than it needs to work.
Who runs it
BlueSkies is run by Phil Murphy, a private pilot and software engineer. Questions: phil.murphy@gmail.com.
What BlueSkies keeps about you
- Your email address, to sign you in and send the morning email, and the display name you choose.
- Whether and when you want the morning email. A bounced email or a spam complaint turns it off.
- What you set up: aircraft, minimums, scenarios and home airfields.
- What you add: airfield ratings and notes, opening hours, checklists, and your logbook if it is loaded for you.
- When you were last active, and which morning emails were sent.
- For sign-in: each request for a sign-in link and each wrong code, with the internet address it came from (an IPv6 address is shortened), so that guessing can be limited.
- If you are invited before you have an account: your email address and a short note, on the invitation list.
What stays on your device
One cookie keeps you signed in for 30 days. Your browser's own storage holds your checklists so they work offline, your checklist ticks and brakes times (which never reach the server), and one display preference for the logbook.
Today there are no adverts, no analytics and no tracking cookies, and no tracking in the emails.
What other pilots can see
- Notes you choose to share, with your display name or as "a pilot".
- Opening hours you enter for an airfield, without your name.
- Never your email address.
Who else handles your data
- The site runs on Amazon Web Services in London (eu-west-2), which stores the data and sends the emails.
- Requests reach it through Amazon's CloudFront network and firewall, which see every visitor's internet address and operate worldwide.
- Weather is fetched from Open-Meteo by map square, never by person, so it learns nothing about you.
- An email asking for an invitation goes to the owner's Gmail inbox.
How long
- Sign-in links, codes and wrong-code records: one day.
- The record that a morning email was sent: seven days.
- A sign-in session: 30 days.
- Technical logs: three months. They hold an account's internal id, never an email or internet address.
- Everything else: for as long as you have an account. Deleted data can stay in Amazon's backups for up to 35 days afterwards.
Your rights and leaving
Every morning email has an unsubscribe link. To see, correct or delete what is held about you, email phil.murphy@gmail.com. You can also complain to the Information Commissioner's Office.