Privacy Policy

1. Who we are

SkyNexus is run by Joeri.dev, registered with the Dutch Chamber of Commerce (KvK) under number 89582292. We are the controller for the personal data described here, under the General Data Protection Regulation (GDPR). You can reach us at email@joeri.dev.

This policy covers the web app at app.skynexus.nl and the website at skynexus.nl. It goes together with the Terms of Use.

2. What we collect and why

We only collect what SkyNexus needs to work, to stay secure and to get better.

• Your account: your email address and a password (stored only as a secure hash). We use them to sign you in and to send emails about your account, such as the confirmation and password reset emails.
• Your settings: your SimBrief pilot ID, display and network preferences and similar choices you make in the app.
• Your flights: the operational flight plans (OFPs) you load from SimBrief, so the EFB can show them, and a count of how many you have loaded.
• Linked accounts: when you choose to link Navigraph (SimBrief), ChartFox or Discord, we keep the access tokens or account IDs and names those services give us, so the link keeps working.
• The SkyNexus Connector: when you pair a simulator computer, we keep the computer name you see on screen and, during pairing, a rough location (city and country) derived from the request. We never store your IP address for this.
• Usage and diagnostics: which parts of the app you open, errors that occur, and loading times. We use this to fix bugs and improve SkyNexus. Page view statistics from Vercel Analytics are anonymous and use no cookies.
• Protecting the data: how many charts and how much procedure and aerodrome data your account loads, and any temporary suspension that follows from bulk collection (see the Terms of Use, section 6).
• Where you came from: when you sign up, the website or campaign that brought you to SkyNexus (for example a search engine or a link in a post). We use this to see which channels work.
• Map reports: when you report an issue on the map, we keep what you send: a screenshot of the part of the map you marked, your note, the category you picked, the map position and zoom, which layers were visible, the route of the flight plan you had loaded, the app version, your browser's user agent and your screen size. We use it to find and fix the problem. When we reply, the reply goes to the email address of your account.
• Greetings: the short greetings pilots can send each other on the map.

We do not sell your data, do not use it for advertising and do not build advertising profiles.

3. Legal basis

• Providing the service (GDPR article 6(1)(b)): your account, settings, flights, linked accounts and the Connector. Without them SkyNexus cannot work for you.
• Our legitimate interests (article 6(1)(f)): keeping SkyNexus secure, preventing abuse and bulk collection of data, fixing errors (including the ones you report on the map), improving the app, knowing which channels bring new pilots, and occasionally emailing account holders about SkyNexus. You can object to these at any time (see section 7), and every non-essential email has an unsubscribe link.
• Legal obligations (article 6(1)(c)): where the law requires us to keep or hand over data.

4. How long we keep it

• Account, settings, linked accounts and your OFP count: until you delete your account.
• Loaded flight plans (OFPs): 60 days.
• Diagnostic and usage events: 90 days. When you delete your account, they are no longer linked to you.
• Loading time measurements: 30 days.
• Daily activity counts for our dashboard: 63 days.
• Chart download counts: 7 days.
• Map reports: 365 days. The screenshot is deleted 90 days after the report is closed or 180 days after you sent it, whichever comes first. Deleting your account removes your reports and their screenshots.
• Procedure and aerodrome data usage counts: 24 hours. A record of bulk collection (a strike): 90 days.
• Connector computers: until you remove them, and at most 30 days after removal or 180 days after last use. Pairing requests: one day.
• Greetings between pilots: one day.
• Server logs at our hosting providers: a short period, set by those providers.

You can delete your account at any time from the settings menu in the app (Delete Account). This removes your account and the data linked to it, apart from the items above that are no longer linked to you.

5. Who helps us process it

We use a small number of service providers. They process data only on our instructions:

• Supabase: database, sign-in and file storage (the screenshots in map reports), hosted in the European Union (Ireland).
• Vercel: hosting of the app and website, anonymous page statistics and loading time measurements.
• Resend: sending emails.
• Our own server in the Netherlands: charts, procedure and aerodrome data and weather layers, including the usage counts that protect the data.

When you link or use a third-party service, data also goes to that service under its own privacy policy: Navigraph and SimBrief (your flight plans), ChartFox (charts), Discord (if you link it), and VATSIM or IVAO (traffic and controller data shown on the map is public network data). Weather data is fetched by our servers; weather providers do not receive your personal data.

6. Data outside the European Union

Some of our providers (Vercel, Resend and the company behind Supabase) are based in the United States. Where personal data leaves the European Economic Area, we rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses to protect it.

7. Your rights

Under the GDPR you have the right to:

• see the personal data we hold about you and get a copy;
• have it corrected or deleted;
• restrict or object to how we use it, including for emails about SkyNexus;
• receive it in a machine-readable format (data portability).

Email email@joeri.dev to use these rights. We answer within one month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in the EU country where you live.

8. Cookies and local storage

SkyNexus uses only first-party cookies and browser storage:

• Needed to work: sign-in session cookies, short-lived cookies while you link Navigraph, ChartFox or Discord, and a cookie that remembers your online network choice for ten minutes.
• Where you came from: a cookie that remembers the website or campaign that brought you here, for 30 days (sn_src), and one that remembers a campaign link for a day (sn_cmp). They are read only by SkyNexus and are not shared.
• Browser storage: your layout, map and display preferences, kept in your own browser.

We do not use advertising or third-party tracking cookies.

9. Security

We protect your data with encrypted connections, access control on every table so each account sees only its own data, hashed passwords and secrets, and keys that stay on our servers. If a data breach puts your rights at risk, we will tell you and the authority as the law requires.

10. Changes to this policy

We may update this policy when SkyNexus changes. The date at the top shows which version applies. We will tell you about important changes in the app or by email.

11. Contact

Questions about your privacy? Email email@joeri.dev.