Privacy policy
Last updated: 24 September 2026
This policy explains which personal data is processed by the glidetracker.world website and the glide. apps (iOS and Android), why, for how long, and what your rights are. It follows the General Data Protection Regulation (GDPR) and French data protection law.
1. Data controller
Lise Lenoir, EI — entrepreneur individuel (micro-entrepreneur), 10 rue de Melun, 77760 Ury, France. Contact for any question or request about your data: contact@glidetracker.world. We have not appointed a data protection officer; this contact handles requests directly.
2. Principle: little data
We only collect the data needed for the service. We do not sell your data, we show no advertising, and we use no audience-measurement tool or profiling.
3. Data processed, purposes and legal bases
a) Visiting the website
IP address, date and time, requested pages and technical browser information, recorded by our host (IONOS) in connection logs. Purposes: security, proper operation, hosts' legal obligations. Legal basis: legitimate interest and legal obligation. Retention: 12 months at most.
b) Live map on the website
To display the map, your browser loads base maps and weather layers from OpenFreeMap, Esri, OpenTopoMap and RainViewer, which receive your IP address and technical browser information (like any web server). Legal basis: performance of the service you request and legitimate interest in displaying it. Air traffic (OGN/FLARM) is fetched by our server; your browser does not contact the OGN network directly. To provide flight history, our server continuously records, at one position per minute, the gliders and tow planes of the OGN network that are flying (registration, competition ID, model, positions, altitudes, take-off and landing times, tow plane), kept for 90 days; devices whose owner disabled tracking in the OGN database are never recorded, and unidentified ones are recorded without a name. Legal basis: legitimate interest (aeronautical safety and information); to object to this recording, write to us or change your settings in the OGN database (ddb.glidernet.org). If you are signed in, your display settings (layers, filters, language, favourites) are also saved to your account. Positions of glide. users only appear if those users enabled visibility for their flight session.
c) Account
Email address and password (stored hashed by Supabase Authentication), or Apple/Google sign-in identifier; first name, last name, language, theme, glider model; WeGlide ID and, if you connect your WeGlide account, the date of birth WeGlide requires to upload flights (saved so you do not have to re-enter it on another device). Legal basis: performance of the contract (providing the account and service). Retention: until you delete your account.
d) Flights, location and content
GPS tracks of your flights (position, altitude, speed, vario, dates), glider, statistics, circuits, photos and videos you take in the app with their position, display settings. Background recording only happens if you granted location access and started a flight. If you enable visibility for a session, your real-time position and callsign are visible to other users and on the site map; you can stop it at any time. You can also add friends and follow pilots. Legal basis: performance of the contract; consent for location, camera and live sharing (withdrawable at any time). Retention: until you delete the account or the content.
e) Subscription and promo codes
Subscription status, plan, end date, platform and purchase identifier provided by the App Store or Google Play, promo codes used. Payment is processed by Apple or Google: we do not receive your card number or payment methods. Legal basis: performance of the contract and accounting obligations. Retention: during the subscription; when you delete your account, this information is dissociated from your identity and kept for our accounting obligations and fraud prevention.
f) Young pilots discount request
If you use the form: first name, last name, date of birth, WeGlide ID, email address, language and a copy of an ID document. Purpose: verify your age and send you a code for free access until you turn 18. Legal basis: your consent (checkbox) and pre-contractual steps taken at your request. The ID is stored in a private space, automatically analysed by a Google artificial-intelligence service (Gemini API) to compare the name and date of birth with those in the form, then deleted as soon as a decision is made (within 30 days at most if a manual check is needed). The record (identity, email, decision) is deleted after 90 days. You can withdraw your consent by writing to contact@glidetracker.world.
Automated decision: accepting or refusing the request is largely automatic. If you think there is an error, write to contact@glidetracker.world: a person will review your request.
g) Emails
We write to you only to answer your request (for example your young pilots code, a refusal, a verification). No newsletter or marketing. Your exchanges with contact@glidetracker.world are kept while we handle your request, then for 3 years at most.
h) Services used from the apps
- Weather: your position or the chosen point is sent to Open-Meteo to get forecasts and terrain elevation; airfield codes are sent to CheckWX; TopMeteo is only used if you connect your TopMeteo account.
- Airspaces and airfields: the displayed areas are requested from our server (Supabase), which queries OpenAIP and caches the responses.
- WeGlide: your flights are only sent to WeGlide if you ask for it or if you enabled automatic upload at the end of a flight.
- Sign in with Apple or Google, and purchases through the App Store or Google Play: processed by Apple and Google under their own policies.
4. Recipients and processors
- Supabase (database, authentication, storage, server functions): project hosted in the European Union (Stockholm, Sweden).
- IONOS: website hosting and the contact@glidetracker.world mailbox.
- Apple and Google: sign-in, purchases and subscriptions; Google also for the ID analysis (young pilots request).
- CARTO, Esri, OpenTopoMap, RainViewer: map display; Open-Meteo, CheckWX, TopMeteo, OpenAIP, WeGlide: depending on the features used, as described above.
- Other users see what you choose to share (callsign, live position, public photos, profile).
- We do not sell or rent your data.
5. Transfers outside the European Union
Some of these providers (notably Supabase Inc., Apple, Google, Esri) may process data outside the European Union, in particular in the United States. These transfers rely on the safeguards provided by the GDPR (adequacy decision such as the Data Privacy Framework, or standard contractual clauses); see their policies for details.
6. Retention periods
- Account, flights, content: until you delete your account (you can do it yourself, see below).
- Website connection logs: 12 months at most.
- Subscription and codes used: dissociated from your identity when the account is deleted, kept for our accounting obligations.
- Young pilots request: ID deleted as soon as a decision is made (30 days at most); record deleted after 90 days.
- Live position: only the latest position is kept, for real-time display.
7. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time, and the right to set instructions for your data after your death. To exercise them, write to contact@glidetracker.world; we reply within one month. We may ask for proof of identity if in doubt.
- Delete your account and data: directly in the app or on the My account page of the site.
- Complaint: you can contact the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, without prejudice to any other remedy.
8. Minors
The apps and site may be used by minors. In France, a minor under 15 cannot alone consent to the processing of their data by an online service: the agreement of their parents or holders of parental authority is required. We encourage parents to guide younger users, in particular for the young pilots discount request.
9. Security
Encrypted connections (HTTPS), data access governed by row-level security rules in the database, ID documents in a private storage space with no public access, passwords never stored in clear. No system is infallible: in case of a data breach likely to expose you to a high risk, we will inform you and the CNIL as required by law.
10. Cookies
The site uses no advertising or audience cookies. See the cookie policy.
11. Changes
We may update this policy; the last update date is shown at the top of the page. In case of a significant change, we will inform you in the app or by email.