Privacy Policy
VECTORS turns your flight history into a personal atlas, passport and record. It is operated by Dennison Tedrow d/b/a VECTORS (“VECTORS”, “we”, “us”). This policy explains what we collect, why, who else handles it, how long we keep it, and the choices you have. Questions: support@vectors.travel.
In short: we use your information to run VECTORS for you. We do not sell it, we do not use it for advertising, and we do not use it to train AI models. VECTORS has no advertising or analytics trackers.
What we collect
- Your account: your email address and name, and your password, which is stored only as a one-way hash. If you sign in with Google, Google gives us your name, email address and a link to your profile picture.
- Sign-in sessions: when you sign in, we record the session with the IP address and browser it came from, to keep your account secure. A session lasts up to 7 days.
- Your profile and settings: display name, home airport and favourite airline (if you choose them), distance and clock preferences, and your sharing defaults.
- Your flight history: the flights you import or add, with their dates, times, airports, airlines, aircraft, seat and cabin; your notes and trips; where each detail came from; and your import history.
- Things you import:
- Google Calendar, if you connect it. See Google user data below.
- Emails you forward or upload: we read the sender, subject and message text to find flight details. Attachments are not read. The message is deleted as soon as it has been processed.
- Files you upload (for example from Flighty, myFlightradar24, OpenFlights, or a calendar file): we read them to find your flights, and the file’s contents are deleted as soon as they have been processed.
- Error reports: if something fails on our servers, a report goes to our error-monitoring provider with personal details removed: no cookies, request contents, passwords, tokens or email addresses, and you appear only as an anonymous identifier.
We do not track your device’s location, and we do not collect information about you from data brokers.
How we use it
- To provide VECTORS: building your flights, Atlas and Passport, and keeping connected sources in sync.
- To enrich your flights with open and licensed flight data (see Who else handles your information).
- To send account messages: email verification, password resets, email-address changes and account-deletion notices. We do not send marketing email; product updates appear inside VECTORS.
- To keep VECTORS secure, prevent abuse and fix problems.
- To comply with the law.
Google user data
Sign in with Google. If you choose it, Google shares your name, email address and profile picture link. We use them only to create your account and sign you in.
Google Calendar. Connecting Google Calendar is a separate choice, with its own Google consent screen. If you connect it, VECTORS gets read-only access to:
- Your list of calendars (their names and identifiers), so it knows which of the calendars you can read to check for flights;
- The events in those calendars (titles, descriptions, locations and times), so it can find the flights you have taken and the ones you book later.
VECTORS never creates, changes or deletes anything in your calendar. Calendar entries are read to find flights and are not stored. What we keep:
- the flights we find;
- for each one, an identifier of the calendar entry it came from and a fingerprint of the flight details found in it, so a later sync can recognise changes;
- your calendars’ names;
- sync markers, so each later sync reads only what changed;
- your Google authorization (a refresh token), which is encrypted.
We do not sell Google user data or use it for advertising. We do not transfer it to anyone except as needed to provide the features you use, to comply with the law, or to protect VECTORS’ security. We do not use it to train artificial-intelligence or machine-learning models. People do not read it unless you ask us to (for example, for support), or when security or the law requires it.
VECTORS' use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Stopping access. Disconnect Google Calendar at any time in Profile › Connections. We then revoke our access at Google and delete the stored authorization and sync markers. Flights already found stay in your history until you remove them or delete your account. You can also remove VECTORS’ access from your Google account at myaccount.google.com/permissions.
Who else handles your information
We use a small number of service providers to run VECTORS. They handle your information only to provide their service to us.
| Provider | What for | What they handle |
|---|---|---|
| Railway | Hosting, database and storage, in the United States | Everything VECTORS stores |
| Resend | Sending account emails; receiving the emails you forward, if you use email forwarding | Your email address and the message; emails you forward to your VECTORS address |
| Sentry | Error monitoring | Error reports with personal details removed |
| Sign-in and Calendar, when you choose them | As described above | |
| Flightradar24 | Looking up details of a flight | A flight number, date and aircraft registration. Never your name, email address or account. |
Flight paths and reference data come from open sources such as ADSB.lol, which we download. Nothing about you is sent to them. The sources and their licences are listed on our Data sources and notices page.
We may disclose information if the law requires it, or to protect the rights, safety or security of our users, VECTORS or others. If VECTORS is ever transferred to a new owner, your information would remain protected by this policy, and we would tell you first.
How long we keep it
- Your account and flight history: for as long as your account exists.
- Imported emails and files: deleted as soon as they have been processed. The flights found in them stay in your history.
- A flight you remove can be restored for 30 days.
- Flight details looked up from Flightradar24: the raw response is deleted once processed, and cached details within 30 days.
- Deleting your account: you are signed out everywhere, Google Calendar is disconnected and forwarded email stops at once. You then have 30 days to change your mind and restore the account. After that, your account and everything in it are permanently deleted. Copies can remain in our backups for up to 90 days until those backups are replaced. Shared flight data that is not about you, such as an aircraft’s recorded path or airport data, is kept.
- Error reports and server logs are kept by our providers for a limited period and then deleted.
Your choices
- See and download your information: Profile › Your data gives you a copy in JSON and CSV.
- Correct it: edit your flights and profile at any time.
- Delete it: remove flights, or delete your account in Profile.
- Disconnect Google Calendar or other sources in Profile › Connections.
Depending on where you live, you may have other rights over your personal information, such as to object to some uses of it. We honour these requests wherever you live. Email support@vectors.travel, and we may need to confirm it is you first.
Cookies and browser storage
VECTORS uses only what it needs to work. There are no advertising, analytics or third-party cookies.
| Name | Purpose | Lasts |
|---|---|---|
__Secure-vectors.session_token | Keeps you signed in | Up to 7 days |
vx_calendar_state | Protects the step that connects Google Calendar | 10 minutes |
| Sign-in security cookies | Protect a sign-in or Google sign-in while it happens | Minutes |
vx.atlas.revealed (session storage) | Remembers that Atlas’ opening animation has played | Until you close the tab |
Security
VECTORS is served only over HTTPS. Passwords are stored as one-way hashes, Google authorizations are encrypted, access to our systems is limited, and administrator accounts require two-factor authentication. No system is perfectly secure; if you find a problem, please tell us at support@vectors.travel.
Children
VECTORS is not for children under 13. If we learn that a child under 13 has created an account, we will delete it.
Where your information is processed
VECTORS is run from the United States, and your information is stored there. Our providers may process it in other countries, with appropriate safeguards.
Changes to this policy
If we make a material change, we will tell you in VECTORS or by email before it takes effect. The date at the top shows the latest version. Our Terms of Service also apply.
Contact
Dennison Tedrow d/b/a VECTORS: support@vectors.travel.