BriefingPal.comDeutsch

Privacy policy

This policy explains which data is processed when you use www.briefingpal.com and the BriefingPal app, why, and for how long. Last updated: 10 November 2026.

1. Controller

Darius Madjdpour
BriefingPal
Summelenweg 19
8808 Pfäffikon SZ
Switzerland
E-Mail: info@briefingpal.com

There is no data protection officer. For privacy questions please write to the e-mail address above.

2. Scope and legal bases

BriefingPal is operated from Switzerland. The Swiss Federal Act on Data Protection (FADP) applies. For users in the European Economic Area the General Data Protection Regulation (GDPR) applies in addition. Depending on the operation, the legal basis is your consent (Art. 6(1)(a) GDPR), providing the function you requested (Art. 6(1)(b) GDPR), or our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR; Art. 31 FADP). The applicable basis is stated for each item below.

In short: without your consent we collect no statistics; there are no user accounts, no newsletter, no advertising, no profiling and no third-party scripts. The app is intended for adult pilots.

3. Hosting and server logs

The website, forms, uploads and statistics run on web hosting by tb-hosting (Switzerland). The calculation and data service (api.briefingpal.com), the weather server (wx.briefingpal.com) and the map server (map.briefingpal.com) run on a server we rent from netcup GmbH (Germany). For technical reasons these servers process your IP address, time, requested address, transferred data volume and browser identifier in access logs. Purpose: delivering the site, troubleshooting, protection against abuse (e.g. rate limits per connection). Legal basis: legitimate interest. Logs are kept only as long as needed for operation and security and are not combined with other data.

At start the calculation service issues a random session identifier (stored in your browser) to limit the number of calculations per session; it contains no information about you.

4. Cookies and local storage

Strictly necessary: the cookie bp_consent stores your cookie choice (12 months). Settings and inputs (language, units, selected aircraft, weights, route, navigation log, model choice) and recently loaded aircraft data are kept in your browser's local storage and are not sent to us. Basis: strictly necessary for the function you requested (Art. 5(3) ePrivacy Directive / § 25(2) German TDDDG).

Only with consent: the cookie bp_vid (random identifier, 13 months) for our own statistics, see item 5. You can change or withdraw your choice at any time via “Cookie settings” in the page footer.

5. Our own usage statistics (only with consent)

If you choose “Accept all” or “Statistics” in the cookie banner, we record on our own server: random identifier (bp_vid), session identifier, your IP address, country and internet provider (from a locally stored database, without any request to third parties), browser, device, screen size, language, time zone, referrer, version, functions used, airfields entered and error messages of the page. Purpose: understanding how BriefingPal is used and finding errors. Legal basis: consent. Retention: full IP address 90 days, then truncated; events 14 months. No transfer to third parties, no Google Analytics, no advertising networks. Without consent nothing is recorded – not even anonymously. Withdrawal: “Cookie settings” → “Reject all”; afterwards nothing is sent any more and the identifier is deleted.

6. Functions that load data from third parties

Map, terrain, airspace, NOTAMs, METAR/TAF, weather models (including Open-Meteo and MeteoSwiss) and aircraft data are normally loaded from our own servers. Some functions, however, fetch content directly from third parties; the respective provider then receives your IP address and the requested coordinates or search terms. This happens only when you use the function (basis: providing the requested function, Art. 6(1)(b) GDPR; if our servers fail, legitimate interest in availability). As soon as such a layer loads images, the map shows the note “External images: …” at the bottom right.

Transfers to third countries: for providers in the USA and the United Kingdom we rely on the necessity for the function you requested (Art. 49(1)(b) GDPR) and – where the provider is certified – on the EU-U.S. or Swiss-U.S. Data Privacy Framework or on standard contractual clauses. An adequacy decision exists for the United Kingdom.

7. Forms

Corrections & feedback: name (optional), e-mail address, subject, message and optional attachments are sent by our web server as an e-mail to info@briefingpal.com (no external mailing service). To prevent abuse the server logs the time, a truncated hash of your IP address, your e-mail address and the subject; this log is deleted after 90 days. Legal basis: handling your request (Art. 6(1)(b) GDPR). E-mails containing evidence for aircraft data are kept as source documentation for the data collection; other requests are deleted once they are dealt with.

Report an airfield: ICAO code, name, elevation, runways, remark and optionally your e-mail address for queries are sent as an e-mail to info@briefingpal.com; the server log (time, IP hash, ICAO, name – without e-mail address) is deleted after 90 days.

Upload a new model / type (POH/AFM upload): see item 8.

All forms use an invisible spam trap (honeypot) and a rate limit per connection; for this a truncated hash of the IP address is stored briefly.

8. POH/AFM upload and aircraft database

With the upload (“Register my aircraft”) you send your name and e-mail address (required, so that we can see who is uploading and reply to you; they are not published), the registration, manufacturer/type/model, optionally serial number, date and values of the weighing report, and files (manual pages, weighing report, photo of the aircraft showing the registration). The files are stored on our web server (together with the time and a truncated IP hash), transferred daily to the operator's computer and to a Google Drive folder (Google LLC, USA / Google Ireland Ltd.) and evaluated there with AI assistance (Claude by Anthropic PBC, USA) in order to add the aircraft data to the database. The copy on the web server is deleted after the transfer; the documents are kept as source documentation for the data record. In addition a database entry about the upload is kept (registration, type, file names, IP hash). Legal basis: providing the requested function and your consent given by uploading. Google and Anthropic process the data on our behalf; the transfer to the USA is based on the EU-U.S./Swiss-U.S. Data Privacy Framework or standard contractual clauses.

Please upload only the documents mentioned – no ID documents, contracts or photos of people. By uploading you confirm that you are entitled to share the documents.

Aircraft database: for each registration BriefingPal stores the model, empty weight, arm, maximum weights and, as origin, e.g. a club name or “private”. We do not store or show owners' names. Because a registration can be linked to a person via public aircraft registers, owners may request deletion or correction of their record at any time (e-mail to info@briefingpal.com).

9. E-mail contact

The mailbox info@briefingpal.com is hosted by Swizzonic (Switzerland) and read in a Google Workspace account (Google). To answer requests and maintain the aircraft data we evaluate incoming messages with AI assistance (Claude by Anthropic). Legal basis: handling your request or our legitimate interest in efficient processing.

10. Security

All connections are encrypted (TLS). The site uses a strict Content Security Policy, loads no third-party scripts, and the server endpoints are rate-limited against abuse. Uploads and logs are not publicly accessible.

11. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw a consent at any time with effect for the future. Please write to info@briefingpal.com. You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or – in the EEA – with the data protection authority of your country of residence.

12. Changes

We update this policy when the app or the legal situation changes. The version published here applies (last updated 14 November 2026).