Last updated: 20 October 2026.
1. Purpose of the service
Paracarnet is an online flight logbook for paraglider pilots. Core product features (logbook, equipment, takeoffs, statistics, viewing the feature poll) remain free.
We process the data necessary to create an account, manage your flights and profile, publicly display flights that you choose to share, handle voluntary monthly support (payment via Stripe, Supporter badge), and record feature-priority votes reserved for active supporters.
2. Data collected
We do not sell your data. We do not use advertising cookies or third-party behavioural analytics tools in the browser as of the date of this policy.
| Category | Examples | Source |
|---|---|---|
| Account | Email, username, password (hashed) | Sign-up |
| Profile | First name, last name, photo, feature-poll vote choice | User input / action |
| Flights | Date, takeoff, IGC (GPS track), photos, analytics metrics derived from the IGC | Input / import / server computation |
| Support | Stripe customer id, badge status (end of activity, cumulative months) | Stripe Checkout / webhook |
| Maps | Requests to OpenStreetMap | Map display |
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Account creation and management | Performance of the contract |
| Retention of the flight logbook | Performance of the contract |
| Transactional emails | Performance of the contract |
| Flight in public mode | Explicit consent (toggle) |
| Voluntary support and Supporter badge management | Performance of the contract |
| Recording feature-priority votes | Performance of the contract |
| Computing and displaying IGC analytics (public or owner access, same as the flight) | Performance of the contract |
| Security and server metrics | Legitimate interest |
4. Cookies and local storage
We set a session cookie (paracarnet_session) that is essential to keep you signed in. Indicative default duration: 90 days (renewed on each sign-in). In line with CNIL guidance, this cookie does not require your prior consent, but we inform you of it. Attributes: HttpOnly, SameSite=Lax, Secure in production.
sessionStorage: technical deduplication during email verification.
localStorage: remembering dismissal of the cookie information banner, and UI preferences (locale, journal filters, analytics display preferences, dismissal of notices / callouts) — no advertising tracking.
When you display a map, your browser loads tiles from OpenStreetMap. This transmits your IP address and technical data to that third party. See their privacy policy at wiki.osmfoundation.org.
5. Recipients and processors
Transactional emails are sent via Resend (SMTP). Only the recipient email address and the message content necessary for the service are transmitted to this processor.
Paracarnet does not store card numbers. Payment data is processed by Stripe under its own privacy policy.
| Provider | Role | Location |
|---|---|---|
| Render Services, Inc. | Application and database hosting (Frankfurt) | USA (company); DB in the EU |
| Grafana Labs (Grafana Cloud) | Server metrics / logs | USA / EU (Grafana Cloud region) |
| OpenStreetMap Foundation | Map tiles | International |
| Resend, Inc. | Sending transactional emails (sign-up confirmation, password reset) | USA |
| Stripe, Inc. | Voluntary support payments (Checkout, Customer Portal, webhooks); card and billing handled by Stripe | USA / EU as determined by Stripe |
6. Retention period
| Data | Duration |
|---|---|
| Account and content | As long as the account is active |
| Sessions | About 90 days by default + automatic purge of expired sessions |
| Support and votes | As long as the account is active (deleted with the account) |
| Server logs and metrics | Up to 90 days |
| Host backups | Automatic Render snapshots |
| Payments (at Stripe) | According to Stripe’s retention policy |
7. Public flights
If you enable public visibility for a flight, information derived from your GPS track (including analytics computed from the IGC) may be viewed by other users. You can withdraw this consent by setting the flight back to private.
8. Your rights
Under the GDPR: access, rectification, erasure, restriction, objection, and portability where applicable. Contact: contact@paracarnet.fr. CNIL complaint: www.cnil.fr.