Privacy Policy
Voyarc is built to hold as little about you as possible. There are no accounts, we never receive the flight files you import, and the map runs in your browser.
Who we are
Voyarc is a registered Australian business name, operated from Victoria, Australia. Privacy questions: [email protected].
No accounts
Voyarc has no sign-up, no login and no profile. You can use every current feature without telling us who you are.
Your files stay on your device
Every file you import, whether a route list, a logbook CSV, or a flown track (FlightAware KML, GPX, Flightradar24 CSV), is read and parsed entirely in your browser. The file is never uploaded to us or to anyone else. What it says reaches us only in the two ways described below: as part of a link you copy or open (Route links), and, on Pro, as the route text, airport codes, counts and dates of the rows you choose to file into your logbook (Saved collections). Close the tab and the file is gone.
Route links
Your route lives in the URL (/route/SYD-LAX-JFK), so that a link
reproduces the map. That means the route text travels wherever you paste the link,
and it appears in our hosting provider's request logs like any other web address.
If a route says something you would not put in a public URL, don't share the link.
Copy link shortens a URL longer than 120 characters, which in practice means an
imported logbook. To do that we store the route part of that link in Cloudflare
Workers KV and hand you a voyarc.app/r/... address for it. What is
stored is the link text the app itself writes: airport codes and map settings, no
identifier of you, no file contents. Short links do not expire.
Settings in your browser
Preferences (distance unit, projection, export aspect, custom route colours, the
look, whether Light, Dark, Day or Night, the ring diversion speed, which panel
sections you left open, whether you have seen the one-off hints, and whether a
paid session chose to keep the Voyarc mark on its exports) are stored in your
browser's localStorage under voyarc-* keys. So is
“Recent”, the last 10 route lists you typed, kept so you can pick one
up again. None of it is ever sent to us. All of it stays on your device, and
clearing site data removes it. Voyarc sets no cookies of its own.
Hosting
Voyarc is hosted on Cloudflare (Pages, R2 storage and Workers). To deliver the site and protect it from abuse, Cloudflare processes standard request metadata: IP address, timestamp, requested URL, user agent and approximate location. That is Cloudflare acting as our infrastructure provider under their terms, and requests may be processed on Cloudflare servers outside Australia. We use it only for delivery, security and debugging, and we don't build profiles from it.
Analytics
We use cookieless, aggregate analytics (Cloudflare Web Analytics) to count page views. Cloudflare adds its measurement script to the pages it serves for us. It does not set cookies, does not follow you across other sites, and does not identify individuals.
We also keep a few counters of our own. When an export finishes, the app sends a single event that says only: the format (PNG or MP4), the look on screen, the style the file came out in, and whether the export was free, Pro or made on a Day Pass. When you copy a link, it says only which kind (long, short or embed) and whether you were on free, Pro or a Day Pass. When you press a Get Pro link, it says only which one (the button at the top of the panel, its menu, or a hint beside a feature) and, again, free, Pro or Day Pass. When a checkout is opened or a purchase completes, our server counts which product it was. There is no identifier, no address, no route text and no file name in any of them, and every event is added into a monthly total. They tell us which styles people export and how many go on to buy, and nothing about who anyone is.
Embeds
When another site embeds a Voyarc map, the iframe loads from our domain, so the same request metadata described under Hosting reaches Cloudflare for viewers of that page. Embeds carry no account data and set no cookies. We don't tell the embedding site anything about its visitors.
Payments (Pro)
Payments are handled by Stripe: you give your card details to Stripe, not to us. We keep only what unlocks your features and keeps our records: your email address, the plan, and Stripe's customer reference. We also keep a scrambled (hashed) copy of your address, which is how “restore by email” finds your purchase without our storing a list anyone could read. Stripe processes that data under its own privacy policy, and Stripe's own checkout pages set their own cookies.
We send three emails, all plain text: one when a subscription ends, carrying the link that restores your saved data; one when you ask us to restore a purchase by email, with a link to your Pro; and, if you ask in the 30 days after a subscription ends, one with a link to your saved data instead. They go out through Resend, our email provider, which processes the address in order to deliver the message. We send no newsletters and no marketing.
Saved collections (Pro)
Pro adds “Collections”: named route lists and a flight logbook that sync between your devices. Apart from the route text behind a short link, this is the only part of Voyarc where we store something you made.
- What is stored: airport codes and how many times you flew each route, the dates you add to the logbook, the name you give each collection, and the map settings needed to reopen it (colours, style, flat or globe, how the map is shown, and the legend's title and labels if you turned one on). There is no notes field and no photo upload: route codes, counts, dates, names and legend labels, and nothing else. Your saved routes are stored against your Stripe customer ID, not your name or address.
- Where: in Cloudflare Workers KV, on Cloudflare's network. We cannot guarantee the data stays in Australia.
- How long: while your subscription is active, and for 30 days after it ends. After that your saved routes and logbook are deleted automatically. For those 30 days you can still open, download and delete them in the app; you just cannot add to them. You can export your logbook to CSV at any time from the panel. The purchase record is not on that clock: your email address, the plan and Stripe's customer reference stay until you ask us to delete them, so a restore or a refund can still be answered.
- How to delete it: open the Pro chip at the top of the panel and choose “Delete my saved data”. It is removed immediately, and your browser's own Recent list is untouched.
- What we never do with it: we do not read, analyse or profile the contents of your collections, we do not use them to target advertising, and we do not share or sell them. Our usage counters record only how many collections and entries exist, never what is in them.
Your rights
Because we hold so little, most requests are quick to answer. Email [email protected] to ask what we hold about you, to correct it, or to have it deleted, and we will respond within a reasonable time. If you're unhappy with our answer you can complain to the Office of the Australian Information Commissioner.
Australian Privacy Act
As a small business, Voyarc is not currently bound by the Privacy Act 1988 (Cth). We follow the Australian Privacy Principles voluntarily anyway, and we will be covered by the Act if that ever changes.
Children
Voyarc is a general-audience mapping tool, not directed at children under 16, and we don't knowingly collect information from them.
Changes
If this policy changes we will post the new version here with a new effective date. Material changes will be called out on the page rather than slipped in.