Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you create an account, post content, or interact with the Service, we may collect:

• Account information: name, email address, and password (managed through our authentication provider)
• Profile information: pilot certificates, ratings, and other aviation credentials you choose to share
• User-generated content: restaurant reviews, forum posts, comments, and photographs you upload
• Visit logs: airports and restaurants you mark as visited, including optional aircraft information
• Restaurant submissions: restaurant details, hours of operation, and menu photos you contribute
• Payment and subscription information: Hangar Club plan, subscription status, billing name, billing address, billing history, cancellation and refund events, and related billing records processed through Stripe. We do not store your full payment card number, expiration date, or CVV/security code.
• Communications: messages you send to us, including support requests and feedback
• Email list: your email address if you sign up for our newsletter or marketing communications
• Community participation: your Discord username if you join our public Discord server, and any content you post in public channels that is referenced or linked from the Service

1.2 Information Collected Automatically

When you access the Service, we automatically collect certain technical information:

• Log data: IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and time spent on pages
• Analytics data: page views, navigation paths, and general usage patterns collected through Netlify Analytics (server-side) and Netlify Real User Monitoring
• Device information: screen resolution, device type, and general hardware characteristics collected through Real User Monitoring
• Map interaction data: general geographic areas you search or view on our map features (processed by Mapbox)

1.3 Information from Third-Party Services

We may receive limited information from third-party authentication providers if you choose to sign in through a third-party service.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: displaying airport and restaurant information, enabling reviews and forum participation, tracking visits, and personalizing your experience
• Account management: creating and maintaining your account, authenticating your identity, and communicating with you about your account
• Communications: sending transactional emails (account verification, password resets), and if you opt in, newsletters and marketing communications
• Analytics and improvement: understanding how users interact with the Service, identifying issues, and improving features and performance
• Safety and moderation: enforcing our Terms of Service, moderating user-generated content, and protecting against fraud, abuse, or illegal activity
• Legal compliance: complying with applicable laws, regulations, and legal processes

We do not sell your personal information. We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

3. How We Share Your Information

We share personal information only in the following circumstances:

3.1 Service Providers

We use trusted third-party services to operate PilotsDiner. These providers process your data only as necessary to provide their services to us:

3.2 Public Content

Information you post publicly on PilotsDiner — including reviews, forum posts, photos, and profile information you choose to make visible — may be accessible to other registered users and, where public pages are available, visitors of the Service. Your username and any displayed credentials may appear alongside your contributions.

3.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, or to respond to a government request.

3.4 Business Transfers

If vRotate Digital LLC is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Service before your information becomes subject to a different privacy policy.

3.5 Advertising Partners

In the future, we may display advertisements on the Service. If and when we do, we will update this Privacy Policy to identify any advertising partners and describe what data, if any, is shared with them. We will provide you with notice before any such sharing begins.

3.6 Community Platforms

We operate a public Discord server as part of the PilotsDiner community. When you join or participate in our Discord server, please be aware of the following:

Discord's data practices. Discord is a third-party platform operated by Discord Inc. Your use of Discord is governed by Discord's own Privacy Policy and Terms of Service. We do not control what data Discord collects, how it processes that data, or how long it retains it. We encourage you to review Discord's privacy practices before joining.

Data we collect through Discord. We do not directly collect or store your Discord data on our servers. However, we use third-party bot services — including Dyno and MEE6 — to assist with server moderation, role management, and community engagement. These bots may process your Discord username, messages, role assignments, and server activity in accordance with their respective privacy policies. We do not use bot-collected data for marketing, advertising, or any purpose beyond server administration and moderation.

Public nature of Discord. Messages and content you post in public channels on our Discord server are visible to all server members. Direct messages to other members or moderators are not monitored by us, but are subject to Discord's own policies. Do not share personal information in public channels that you do not want other members to see.

4. Cookies and Tracking Technologies

4.1 What We Use

PilotsDiner uses the following tracking technologies:

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled.
• Netlify Analytics: A server-side analytics service that does not use cookies or track individual users. It collects aggregate page view and traffic data.
• Netlify Real User Monitoring (RUM): Collects client-side performance metrics including page load times, device information, and browser characteristics to help us improve site performance.
• Mapbox: May set cookies or use local storage to support map rendering and interaction.

4.2 What We Do Not Use

We do not use third-party advertising trackers, social media pixels, or cross-site tracking technologies. We do not participate in advertising networks that track your activity across other websites.

4.3 Your Choices

Most web browsers allow you to control cookies through their settings. Disabling essential cookies may prevent you from using certain features of the Service, such as signing in to your account.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account
• User-generated content (reviews, forum posts, photos): Retained until deleted or removed, unless retention is required for legal, safety, moderation, backup, or integrity purposes. Previously published content may remain after account deletion with account-identifying profile information removed.
• Payment and subscription records: Retained as needed for billing, accounting, tax, fraud prevention, dispute handling, and legal compliance
• Analytics data: Retained in aggregate form; individual-level analytics data is not stored beyond what Netlify retains per its own data retention policies
• Email marketing data: Retained until you unsubscribe
• Log data: Retained for up to 12 months for security and troubleshooting purposes

After account deletion, we may retain anonymized or aggregated data that can no longer be associated with you.

6. Your Privacy Rights

Depending on where you reside, you may have specific rights regarding your personal information. We honor these rights for all users regardless of location wherever reasonably feasible.

6.1 Rights Available to All Users

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate personal information
• Deletion: Request that we delete your personal information
• Data portability: Request a copy of your data in a structured, machine-readable format
• Withdraw consent: Where processing is based on consent, withdraw that consent at any time
• Opt out of marketing: Unsubscribe from marketing emails at any time using the link in each email

6.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

• Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your data.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to correct: You may request correction of inaccurate personal information.
• Right to opt out of sale/sharing: We do not sell or share your personal information for cross-context behavioral advertising. If this changes, we will provide a "Do Not Sell or Share My Personal Information" link.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

6.3 Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and Other States with Privacy Laws

If you reside in a state with a comprehensive consumer privacy law, you may have similar rights to access, correct, delete, and obtain a portable copy of your personal information, as well as the right to opt out of targeted advertising, sale of personal information, and certain profiling. You may also have the right to appeal our decision regarding a privacy request.

6.4 European Economic Area and United Kingdom (GDPR)

If you are located in the EEA or UK, our legal bases for processing your personal information include your consent, performance of a contract (providing the Service), and our legitimate interests (analytics, security, and improving the Service). You have the right to lodge a complaint with your local data protection authority.

6.5 How to Exercise Your Rights

To exercise any of your privacy rights, contact us at:

We will respond to verifiable requests within 45 days (or 30 days for GDPR requests). We may request additional information to verify your identity before processing your request.

7. Children's Privacy

PilotsDiner is intended for users aged 13 and older. We do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at cody@vrotatedigital.com so we can take appropriate action.

Users between the ages of 13 and 17 may use PilotsDiner with the consent of a parent or legal guardian. Parents or guardians who allow minors to use the Service should review this Privacy Policy and discuss it with the minor.

8. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information. These measures include encrypted data transmission (TLS/SSL), secure authentication protocols, and access controls on our database and hosting infrastructure.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials.

9. International Data Transfers

PilotsDiner is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer.

10. Third-Party Links

The Service may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on the Service
• Send an email notification to registered users if the changes significantly affect how we handle personal information

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at: