Privacy policy

You may provide your name, email address, phone number, aircraft details and preferences, hangar descriptions, measurements, rates, photos, contact details, and access instructions. We also collect booking dates, reservation and payment status, messages, airport alert subscriptions, and information you send through our contact form or support email. Draft listings may be saved in your browser before sign-in.

Our authentication provider processes your sign-in and session information. If you choose Google sign-in, we receive account information such as your name, email address, and account identifier from Google. We do not receive your Google password.

Our hosting and analytics providers process technical data such as IP address, browser and device information, pages visited, referring sites, interactions, timestamps, errors, and browser or session identifiers. Searching for airports or routes also sends the locations you enter to the service.

We use information to operate accounts, display and search listings, compare aircraft fit, arrange reservations and payments, deliver messages and requested airport alerts, provide support, and communicate about your account or stay. We also use it to understand service usage, diagnose failures, prevent abuse and fraud, resolve disputes, and meet legal and financial obligations.

Published listing descriptions, photos, rates, airport details, and owner display information can be viewed by anyone and may appear in search engines. Do not put sensitive information in public listing fields or photos. Private contact and access fields are handled separately from public listing content and shared with reservation participants as needed to arrange a confirmed stay. Messages are available to their participants; we may access them for support, safety, abuse investigations, or legal requests. Recipients may keep information you share with them outside our service.

We transmit information over network connections and provider APIs to companies that help deliver the service. These include Cloudflare for hosting, security, and contact email; Neon for database, authentication, and photo storage; Resend for service emails; Stripe for payments and owner payouts; and PostHog for analytics and error monitoring. Providers receive information needed for their role, such as email addresses and notification content for email delivery.

Stripe collects payment details and, for owners, banking and identity verification information through its own interfaces. We receive transaction identifiers, amounts, statuses, and account readiness information. We do not store full payment card numbers or security codes in our application database. Stripe also handles information under its privacy policy. Google sign-in and direct requests to OpenFreeMap for map tiles, fonts, and styles are also subject to those providers’ policies; direct requests disclose technical information such as your IP address to the provider.

We may disclose information when required by law, to protect people or the service, to investigate fraud, or as part of a business transfer with appropriate confidentiality measures. We do not sell personal information or share it for cross-context behavioral advertising.

Cookies and browser storage support sign-in, preferences, drafts, and analytics. PostHog helps us understand page visits, searches, listing and booking interactions, and errors. When you sign in, analytics can be associated with your internal account identifier. We do not intentionally add your name or email address to analytics person profiles.

When enabled, session replay records how pages are used. Our replay configuration masks page text and input values and disables console, network body/header, and canvas recording. Analytics URLs are stripped of query strings and fragments. You can restrict cookies and storage through your browser, although doing so may prevent sign-in or other features from working. We do not currently offer an on-site analytics preference switch.

We retain information for operating your account and the service and for necessary transaction records, dispute handling, fraud prevention, and legal obligations. Retention depends on the record and purpose. Removing a listing or closing an account does not immediately remove all associated transaction records, backups, or copies held by recipients or search engines.

We use HTTPS, authenticated sessions, access checks, and restricted storage credentials to help protect information. No online service can guarantee absolute security. Avoid sending payment card numbers, identity documents, or access credentials through public listings, messages, or support email. Our providers may process information in the United States and other countries where they operate.

You can update available profile and listing fields in your account and unsubscribe from airport alerts using their unsubscribe options. Essential account, reservation, payment, and security messages may still be sent. Contact atlas@hangar.today to request access, correction, deletion, a copy of your information, or to raise a privacy concern. Depending on where you live, additional privacy rights may apply. We may need to verify your identity, and some records may need to be retained for legal obligations or unresolved transactions. Contact us if you want us to review our response to a request.

The service is intended for adults aged 18 or older. We do not knowingly collect personal information from children under 13; contact us if you believe a child has provided information. We may update this policy as the service changes and will update the date above. For material changes, we will provide an appropriate notice. See our terms of service for the rules for using Hangar Today.