Privacy policy
Last updated: 9 July 2026.
1. Purpose of the service
Paracarnet is an online flight logbook for paraglider pilots. We process the data necessary to create an account, manage your flights and profile, and, where applicable, publicly display certain flights that you choose to share.
2. Data collected
We do not sell your data. We do not use advertising cookies or third-party behavioural analytics tools in the browser as of the date of this policy.
| Category | Examples | Source |
|---|---|---|
| Account | Email, username, password (hashed) | Sign-up |
| Profile | First name, last name, photo | User input |
| Flights | Date, takeoff, IGC (GPS track), photos | Input / import |
| Technical | IP address, server logs, session | Connection |
| Maps | Requests to OpenStreetMap | Map display |
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Account creation and management | Performance of the contract |
| Retention of the flight logbook | Performance of the contract |
| Transactional emails | Performance of the contract |
| Flight in public mode | Explicit consent (toggle) |
| Security and server metrics | Legitimate interest |
4. Cookies and local storage
We set a session cookie (paracarnet_session) that is essential to keep you signed in. In line with CNIL guidance, this cookie does not require your prior consent, but we inform you of it. Attributes: HttpOnly, SameSite=Lax, Secure in production.
sessionStorage: technical deduplication during email verification. localStorage: remembering dismissal of the cookie information banner (no advertising tracking).
When you display a map, your browser loads tiles from OpenStreetMap. This transmits your IP address and technical data to that third party. See their privacy policy at wiki.osmfoundation.org.
5. Recipients and processors
Transactional emails are sent via Resend (SMTP). Only the recipient email address and the message content necessary for the service are transmitted to this processor.
| Provider | Role | Location |
|---|---|---|
| Render Services, Inc. | Application and database hosting (Frankfurt) | USA (company); DB in the EU |
| Grafana Labs (Grafana Cloud) | Server metrics / logs | USA / EU (Grafana Cloud region) |
| OpenStreetMap Foundation | Map tiles | International |
| Resend, Inc. | Sending transactional emails (sign-up confirmation, password reset) | USA |
6. Retention period
| Data | Duration |
|---|---|
| Account and content | As long as the account is active |
| Sessions and tokens | Limited duration + automatic purge |
| Server logs and metrics | Up to 90 days |
| Host backups | Automatic Render snapshots |
7. Public flights
If you enable public visibility for a flight, information derived from your GPS track may be viewed by other users. You can withdraw this consent by setting the flight back to private.
8. Your rights
Under the GDPR: access, rectification, erasure, restriction, objection, and portability where applicable. Contact: paul.forestie@gmail.com. CNIL complaint: www.cnil.fr.