Privacy policy

1. Introduction

XCFinder, published by Sébastien Picot (Capsule5), is committed to protecting users’ privacy. This privacy policy explains what personal data we collect, how we use it, and what your rights are.

2. Data controller

Sébastien Picot / Capsule5
Website: capsule5.com
For any questions about your personal data, you can contact us using the information available on the About page. We will respond within a maximum of 30 days.

3. Data we collect

3.1 Authentication data

When signing in with Google OAuth, we collect:

• Your email address
• Your full name
• Your Google profile photo
• A unique identifier provided by Google

3.2 Flight data

When you upload IGC files, we store:

• The content of the IGC file (GPS track of the flight)
• Extracted metadata (date, location, distance, duration, etc.)
• The association between your user account and uploaded flights

3.3 Browsing data

We automatically collect certain technical data:

• IP address
• Browser type and operating system
• Pages visited and time spent
• Screen resolution

4. Purposes of processing

We use your data to:

• User account management: creation, authentication, and profile management
• Service delivery: storing and analyzing your flights, generating 3D visualizations
• Service improvement: analyzing usage to improve features
• Anonymous statistics: creating aggregated usage statistics
• Communication: responding to your requests and sending important service notifications

5. Legal basis

Our processing of your data is based on:

• Your consent: when creating your account and using the service
• Performance of a contract: to provide the services you requested
• Our legitimate interests: to improve the service and ensure its security

6. Data retention

• Account data: retained while your account is active, then deleted 30 days after account deletion
• Flight data: retained indefinitely unless you request deletion
• Technical logs: retained for up to 12 months

7. Data sharing

Your personal data is not sold to third parties. It may be:

• Hosted: on secure servers (we use hosting services that comply with GDPR requirements)
• Shared with Google: only as part of OAuth authentication
• Disclosed if required by law: in case of legal obligation or a court order

8. Cookies and similar technologies

8.1 Essential cookies

We use cookies necessary for the operation of the service, in particular to maintain your sign-in session.

8.2 Analytics cookies

We use Google Analytics to analyze site usage. These cookies help us understand how to improve the service. You can disable these cookies in your browser settings.

9. Your rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data
• Right to restriction: restrict processing of your data
• Right to portability: receive your data in a structured format
• Right to object: object to processing of your data
• Right to withdraw consent: at any time

To exercise these rights, contact us using the information available on the About page. We will respond within a maximum of one month.

10. Data security

We implement appropriate security measures to protect your data:

• Encrypted communications (HTTPS)
• Secure authentication via OAuth 2.0
• Secure data storage with restricted access
• Regular backups
• Regular security system updates

11. International transfers

Your data may be transferred to and stored on servers located outside the European Union. In that case, we ensure appropriate safeguards are in place in accordance with the GDPR (standard contractual clauses, Privacy Shield, etc.).

12. Public FFVL data

Flight tracks from the FFVL are public data. XCFinder displays and analyzes them but does not control them. If you would like your FFVL flights not to be displayed on XCFinder, please contact us.

13. Minors

XCFinder is not intended for people under 16 years old. We do not knowingly collect personal data from minors under 16. If you are a parent and believe your child has provided us with personal data, please contact us.

14. Changes to this policy

We may update this privacy policy from time to time. Material changes will be notified to registered users by email or via a notification on the site. The last updated date is shown at the top of this page.

15. Complaint

If you believe your rights are not respected, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés).