Privacy Policy

1. Overview

ADSBiq is a community-powered ADS-B aggregator network. This Privacy Policy explains what information we collect, how we use it, and your choices. We are committed to collecting only what is necessary to operate the network and to being transparent about our practices.

2. Information We Collect

2a. ADS-B Aircraft Data

Our core data consists of ADS-B transmissions broadcast openly by aircraft on the 1090 MHz radio frequency. This data includes aircraft transponder codes (hex/ICAO24), callsigns, positions, altitudes, speeds, and squawk codes. These are unencrypted public radio broadcasts that anyone with a receiver can pick up. We generally do not consider ADS-B aircraft data to be personal data, as it pertains to aircraft and is broadcast publicly. However, in certain contexts (such as private aircraft ownership), such data may be associated with individuals.

2b. Feeder Information

When you register as a feeder, we collect:

• Name or alias (optional; may be "Anonymous")
• Email address (optional; used for account communication only)
• Receiver location (latitude, longitude, altitude) for MLAT calculations and coverage mapping
• Feeder UUID and API key (system-generated identifiers)
• Connection metadata (last seen timestamp, message rates, aircraft counts)

Your receiver location is used for multilateration processing and internal coverage analysis. We do not publish your precise home coordinates on the public site unless you explicitly opt in. We take reasonable measures to protect feeder location data, but no system can guarantee absolute security.

2c. Website Users (Google Sign-In)

If you sign in with Google, we receive and store your email address, display name, and profile picture URL from Google. We use this solely for authentication and admin purposes. We do not access your Google contacts, calendar, drive, or any other Google services.

2d. Server Logs

Our servers automatically log IP addresses, request timestamps, URLs accessed, and user-agent strings. These logs are used for security monitoring, abuse prevention, and debugging. Logs are retained for no more than 90 days.

3. How We Use Information

• Operate the network: Aggregate ADS-B data from feeders, perform MLAT calculations, serve data via API and live map.
• Enrich aircraft data: We supplement raw ADS-B data with aircraft registration, operator, and engine information from public aviation databases (FAA, Transport Canada, EASA, etc.) to provide more useful data to API consumers.
• Maintain security: Detect abuse, enforce rate limits, and protect the network from unauthorized access.
• Communicate with feeders: Send setup instructions, service updates, or respond to support requests (only if you provided an email).

4. Information Sharing

We do not sell your personal information. We may share information in these limited circumstances:

• Aggregated aircraft data: ADS-B data (aircraft positions, callsigns, etc.) is shared through our API and live map, which is the core purpose of the Service.
• Legal requirements: We may disclose information if required by law, subpoena, or court order.
• Service providers: We use standard hosting infrastructure (AWS, Cloudflare) which may process data on our behalf under their respective privacy policies.

5. Data Retention

• Feeder accounts: Retained while your account is active. You may request deletion at any time.
• ADS-B data: Real-time data is transient and typically retained for operational purposes only. Historical aggregated data may be retained indefinitely for research and analysis.
• Server logs: Retained for up to 90 days.
• User accounts (Google SSO): Retained until you request deletion.

6. Your Rights and Choices

• Stop feeding: You may disconnect your receiver at any time with no consequences.
• Delete your account: Contact us to request deletion of your feeder registration and personal data.
• Data access: You may request a copy of the personal data we hold about you.
• Corrections: You may request corrections to inaccurate personal data.

For EU/EEA residents: You have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with your local data protection authority.

7. Cookies and Tracking

We use session cookies for authentication (login state). We do not use advertising trackers, analytics cookies, or third-party tracking pixels. The live map (tar1090) may use local storage for map preferences.

8. Security

We use industry-standard measures to protect your data, including HTTPS encryption, access controls, and secure infrastructure. However, no system is perfectly secure, and we cannot guarantee absolute security.

9. Children

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us for removal.

10. International Data Transfers

Our servers are located in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.

12. Contact

Privacy questions or data requests may be directed to: [email protected]