GDPR Policy

Last updated: 2026-10-07

1. Data controller

The operator of Drone Log (drone-log.app) processes personal data provided by users to enable account access, authentication, flight logging, and communications related to platform usage. To exercise GDPR rights, contact us at the address listed on the Contact page.

2. What data we collect

We may process data such as: first and last name, email, pilot profile details, drone details, flight log records, and technical metadata required for security and platform operation.

3. Processing purposes

• Creating and managing user accounts
• Providing application features (profile, logs, exports, requests)
• Security, abuse prevention, and technical auditing
• Operational communications (e.g. email verification, password reset)

4. Legal basis

Processing is based on delivering the requested service, compliance with legal obligations, and, where required, explicit user consent.

5. Storage and retention

Data is retained for as long as needed to provide the service or until account anonymization is requested, except where longer retention is required by applicable law.

6. Your rights

You have rights to access, rectification, deletion/anonymization, restriction, objection, and portability, within legal limits. To exercise these rights, use the contact details available in the app.

7. Data security

We apply reasonable technical and organizational safeguards to protect data, but no online system can guarantee absolute security.

8. Marketing, spam, and data selling

We do not sell personal data and we do not use it for targeted advertising. We do not send marketing or spam emails without explicit consent.

9. Third parties and transfers

We use third-party providers strictly to operate the service (for example transactional email delivery). Data is processed only to the extent necessary to provide the app.

10. GDPR contact

For data protection questions or rights requests, use the Contact page or email [email protected]. We respond within applicable legal timeframes.

11. Cookies and similar technologies

We use technical cookies required for authentication, session security, and language preferences, and for “Remember me” if you enable it at login (keeps you signed in for up to 7 days). These are always active. With your consent we may use an optional analytics cookie (visitor_id) to understand how the service is used. The interface theme (light/dark) is stored locally in your browser (localStorage). We do not use targeted advertising cookies. On your first visit you can choose in the bottom banner: “Essential only” (no analytics cookie) or “Accept all”.

12. Public content and aggregated usage data

Public pages (blog, guides, SEO landing pages) may be indexed by search engines. We do not sell visitor data. Aggregated technical statistics (if collected) serve only to improve the service, without commercial profiling.