Privacy Policy

Datamask Aviation collects almost nothing. No cookies, no analytics, no advertising, no tracking. The minimum that does happen is set out below.

Controller

The data controller within the meaning of the EU General Data Protection Regulation (GDPR) is Data Mask j.d.o.o., Rudeška cesta 132, 10000 Zagreb, Croatia. Full company details are in our Legal Notice. Contact for privacy matters: admin@datamask.org.

What we log

Our web server records standard HTTP access logs for each request: IP address, timestamp, URL path, HTTP status code, response size, User-Agent string and Referer header. These logs are used solely to operate the service, debug failures and detect abuse. They are not used for analytics or profiling, are not shared with third parties, and are rotated automatically.

Lawful basis: legitimate interest in operating and securing the service (Art. 6 (1) (f) GDPR).

Hosting: the website runs on a virtual private server operated by Contabo GmbH in Germany (Aschheim). All processing of access logs happens within the EU.

Cookies, analytics, tracking

This website does not set any cookies, does not embed any analytics tools (no Google Analytics, no Plausible, no Matomo), does not load any advertising scripts, and does not include tracking pixels or fingerprinting. Page navigation is not personalised in any way.

Third-party content loaded by your browser

The interactive map and airport-diagram views load tiles and styles directly from third-party providers. When you view those pages, your browser makes requests to:

CARTO and the OpenStreetMap project — for base-map tiles.
NASA EOSDIS GIBS — for the optional GOES satellite layer on the global map.

These requests originate from your browser, not from our server, and disclose your IP address and User-Agent to those providers under their respective privacy policies. We have no control over their logging practices.

Aviation data

All METAR, SPECI, TAF and related observation/forecast content published on this site is sourced from public aeronautical meteorological services (NOAA NWS, AviationWeather.gov, the Iowa State University IEM ASOS archive). It contains no personal data.

Your rights under the GDPR

You have the right at any time to request access to (Art. 15), rectification of (Art. 16), erasure of (Art. 17), restriction of processing of (Art. 18), and portability of (Art. 20) any personal data we hold about you. You may also object to our processing on legitimate-interest grounds (Art. 21).

You also have the right to lodge a complaint with a data-protection supervisory authority (Art. 77). The competent authority in Croatia is the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP — azop.hr).

Changes to this policy

We may update this privacy policy when our infrastructure or data handling changes. Material changes will be flagged on this page.