Privacy Policy
Last updated: 20 July 2026
This policy explains how Scandiplanes.com ("we", "us") collects, uses and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR). Scandiplanes.com is a hobby/community aircraft-spotting site covering Sweden, Norway and Finland.
1. Data controller and contact
The data controller for this site is the operator of Scandiplanes.com. For any question about this policy, or to exercise any of the rights below, you can contact us.
2. What data we collect
- Account data: email address, username, password (stored securely as a hash — we never see or store it in plain text) and, optionally, a home airport.
- Content you upload: aircraft photos and their metadata (registration, aircraft type, airline, airport, camera, notes), plus an optional profile picture and banner.
- Interaction data: comments, likes and favorites you make on photos.
- Technical data: our hosting provider (Cloudflare) processes standard connection data (such as IP address and browser information) for security and abuse-prevention purposes. We do not use analytics or advertising trackers.
3. Why we process your data, and on what legal basis
- Performance of a contract: to create your account and provide the core features of the site (uploading, browsing, commenting, the leaderboard).
- Legitimate interest: to keep the site secure and prevent abuse.
- Consent: you actively agree to this policy and our Terms of Service when you create an account.
4. Who we share data with
We use a small number of processors to run the site — they only process data on our behalf:
- Supabase — database, authentication and file storage.
- Cloudflare — hosting, content delivery and security.
Your username, uploaded photos, and profile picture/banner are publicly visible to anyone visiting the site, since that is the purpose of a photo-sharing platform. Your email address is never shown publicly.
These providers may process data on servers located outside your country of residence, including outside the EU/EEA, under their respective data processing agreements and standard contractual clauses.
5. How long we keep your data
We keep your account and content for as long as your account exists. If you delete your account, your profile, photos, comments, likes and favorites are permanently deleted immediately — see Section 6.
6. Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you, and export it in a portable format — go to Settingsand use "Download my data".
- Rectify inaccurate data — you can edit your username, home airport, profile picture and banner at any time in Settings.
- Eraseyour data ("right to be forgotten") — use "Delete My Account" in Settings, which permanently removes your account and all associated content immediately.
- Object to or restrict processing, or withdraw consent at any time (by deleting your account).
- Lodge a complaint with your national data protection authority — for example Datatilsynet (Norway), Integritetsskyddsmyndigheten/IMY (Sweden), or the Office of the Data Protection Ombudsman (Finland).
7. Cookies
We only use strictly necessary session cookies to keep you logged in. We do not use analytics, advertising or tracking cookies.
8. Children
Scandiplanes.com is not directed at children under 16, and we do not knowingly collect data from them.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.