Privacy policy

This is an English translation provided for convenience. In case of any discrepancy, the Spanish version prevails.

Last updated: 22 October 2026

Data controller

• Owner: Francisco Javier Ruiz-Calderón Martín de la Hinojosa (AIRLAB FPV)
• NIF (tax ID): 77810674H
• Address: Calle Virgen de la Antigua 28, 6.º B, 41011 Sevilla (Spain)
• Contact email: airlabfpv@gmail.com

What data I process and why

• Licence request (website form): name, email, phone number if you provide it, company or organisation, type, licence of interest, number of seats, whether you want a demo and your message. They are used only to reply to your request and are stored on Netlify (Netlify Forms). Legal basis: taking pre-contractual steps at your request.
• Free trial (form at /en/free-trial): name, email, company or organisation and type (operator, school, university, manufacturer or other); the sign-up and verification dates; the flight time, the time with the simulator open and the AI analyses used during the trial; and an encrypted fingerprint (hash) of your IP address, which does not reveal what it is. They are used to give you trial access, enforce its limits (one trial per email address and a maximum number of trials per connection per day) and write to you about the licence when it ends. They are stored in Supabase. Legal basis: taking pre-contractual steps at your request and, for abuse prevention, legitimate interest.
• .param analyzer (/en/param-analyzer): the file you upload is analysed on the server and is not stored. If you request the AI report: name, email and user type, an encrypted fingerprint (hash) of your IP address and a summary of the file (aircraft type, ArduPilot version and number of errors and warnings). The parameters are sent to the AI provider only to write the report and are deleted from my systems once it is finished. They are used to give you the report, enforce the usage limit and write to you about the simulator. They are stored in Supabase. Legal basis: your consent when you request the report and, for abuse prevention, legitimate interest.
• Log analyzer (/en/log-analyzer): the .bin log is read in your browser and is not sent to my servers. If you request the AI report, the computed flight summary (vibration, battery, GPS, EKF, errors, modes and parameters) is sent together with your name, email, user type and an encrypted fingerprint (hash) of your IP. The summary is sent to the AI provider only to write the report and is deleted from my systems once it is finished; the aircraft type, version and number of parameters and errors are kept. Purpose, storage and legal basis: as for the .param analyzer.
• UAS zones map (/en/where-to-fly-drone-spain): I do not store the places you check. The point's coordinates are sent to ENAIRE to request the zones and, if you use the search box, the text is sent to Nominatim (OpenStreetMap). “My location” uses your browser's geolocation only if you allow it, and it only leaves your device for those queries. The base map is loaded from IGN or OpenStreetMap.
• Account: your email address, to create your account and let you log in with the link or code I send you. Legal basis: performance of the contract.
• Purchase: the email, name and country you enter when paying, amount, date and payment identifiers in Stripe. I do not receive or store your card details. Legal basis: performance of the contract and tax obligations.
• Simulator session: a session identifier, the date of last use and the browser type, so that the account only has the simulator open on one device at a time. Legal basis: legitimate interest in preventing account sharing.
• Logbook and certificates: the flights you log (date, duration, aircraft, modes, landings, notes), your progress and, if you request a certificate, the name you enter for it. The certificate can be verified publicly with its code, which shows that name, the course and the date. Legal basis: performance of the contract.
• AI analysis (only if you press Captain Pitot's AI buttons): the flight data, your question and the on-screen context are sent to the AI provider to generate the answer. They do not include your email. Legal basis: performance of the contract.
• Measurement and advertising (only if you accept analytics and advertising cookies): browsing data (pages viewed, source of the visit, device) and the purchase event (order identifier and amount, without your email) are sent to Google and Meta via Google Tag Manager to measure visits and sales and improve the ads. Legal basis: your consent, which you can withdraw in the cookie policy.
• Live weather and real air traffic (only if you enable them): the coordinates of the take-off point you choose, rounded, pass through my server to request the weather report (NOAA Aviation Weather Center and MET Norway) and the air traffic (adsb.lol). Neither your email nor any of your account data is sent, and they are not stored. Legal basis: performance of the contract.
• Phone viewer and remote instructor (only if you use them): a temporary session code is created; the flight video, the controls and the voice go directly between the two browsers (WebRTC) and are not recorded on my servers. Legal basis: performance of the contract.

Your email appears discreetly on the simulator screen to discourage account sharing. I do not sell your data. Only if you accept analytics and advertising cookies is browsing data used to measure and improve my ads, as explained above.

Providers that process data on my behalf

• Supabase (authentication and database), hosted in the European Union (Ireland, region eu-west-1).
• Netlify (website hosting, server functions and storage of the licence request forms).
• Stripe (payment processing; it also acts as controller of its own processing in accordance with its privacy policy).
• Google (sending the login emails from airlabfpv@gmail.com and, only in the simulator, its fonts: your browser connects to Google Fonts to download them; the public website hosts them on its own domain).
• Google (Tag Manager, Analytics and Ads) and Meta Platforms, only with your consent to analytics and advertising cookies; they also act as controllers of their own processing in accordance with their privacy policies.
• Anthropic (the AI model behind Captain Pitot, only when you use its AI features).
• Cloudflare (relay servers for the phone viewer and the remote instructor, only when a direct connection is not possible).

How long I keep them

Account data, for as long as you keep the account. Free trial and .param analyzer data, for up to 12 months after the trial ends or after you request the report (to handle your licence request and ensure each email address has only one trial), unless you ask for their deletion earlier. Purchase data, for the periods required by tax and commercial law. Session data is overwritten each time you open the simulator.

Your rights

You can request access, rectification, erasure, objection, restriction and portability by writing to airlabfpv@gmail.com. If you believe I have not handled your request properly, you can lodge a complaint with the Agencia Española de Protección de Datos (AEPD, the Spanish Data Protection Agency) (aepd.es).