AeroLog uses the third-party providers listed below to run the Service. Each receives only the data needed for its specific function. If you have questions about how any of them handle data, email team@aerolog.us.
Infrastructure
- Google Firebase (Google LLC — United States) — authentication, Firestore database, Cloud Storage for uploaded files. Firebase DPA.
- Vercel (Vercel Inc. — United States) — serverless hosting and edge delivery of the web app. Also runs Vercel Analytics and Speed Insights: aggregate page views and performance timings, no cookies. Vercel DPA.
Billing
- PayPal (PayPal, Inc. — United States) — subscription checkout, recurring billing, and refunds. PayPal is the PCI-DSS processor; AeroLog never receives card numbers.
Analytics
- Google Analytics (Google LLC — United States) — product analytics: pages, navigation, scroll depth, filter choices, and searches on public aviation data. Sets first-party
_gacookies. Never receives logbook entries, file contents, or copied text. Google signals and ad personalization are off. Google Ads Data Processing Terms.
Advertising
- Google Ads (Google LLC — United States) — a conversion tag. It loads on every page and sets Google advertising cookies, and reports a conversion once when a paid subscription completes. It receives no logbook data.
Aviation data
- aviationweather.gov (US NOAA / National Weather Service) — METAR, TAF, and NOTAM lookups. Only the airport identifiers you request are sent.
- airplanes.live and adsb.lol(community ADS-B aggregators) — live traffic positions for the map. Only the coordinates and radius you request are sent.
- Cloudflare (Cloudflare Inc., US) — tunnels to AeroLog's own ADS-B and ATC audio receivers. Carries the audio stream and transcripts; no account data.
Changes
When we add or remove a subprocessor, we update this page and note it on the What's new page. Material changes are announced in-app at least 14 days before taking effect.