VectorEFB uses no advertising, analytics or tracking cookies, and shares nothing with third parties for marketing. That is why you are not shown a cookie banner. The ePrivacy rules (Article 5(3) of Directive 2002/58/EC, in Romania Law 506/2004) require your consent before a site stores or reads anything on your device, except where it is strictly necessary to provide a service you asked for. Everything below falls under that exception. If we ever add something that does need consent, we will ask first, and it will stay off until you say yes.
Who is responsible
VectorEFB, operated from Romania by its owner and developer. Questions: contact@vectorefb.com. How we handle personal data is in the privacy notice.
Cookies
- vefb_s, your sign-in. Set only when you sign in or create an account. It holds a random token and nothing else, and our server stores only a digest of it. It lasts up to 30 days or until you sign out, whichever comes first. It is HTTP-only, SameSite=Lax and, on the live site, Secure, and it belongs to vectorefb.com (a first-party cookie). Strictly necessary: without it you cannot stay signed in.
- vefb_oauth, linking a Google account. Set only if you press the button to sign in with or link Google. It holds a random value that proves the answer coming back from Google is the one you asked for. It lasts 10 minutes at most and is removed when the link finishes. Strictly necessary for that step.
- vefb_pa, the operator console. Set only for the administrator accounts that run the service. Visitors never receive it.
These cookies are set by our own server and are not shared with anyone. We set no third-party cookies, and the site does not embed advertising, social buttons or analytics from other companies. The one exception is the optional YouTube video on some Learning hub pages: it loads only after you press Play, from the privacy-enhanced YouTube address (youtube-nocookie.com), and then Google can receive your IP address and may store its own cookies or similar data on your device. Do not press Play if you do not want that.
Local storage and similar
Local storage, session storage and the caches below stay in your browser unless the app sends something because you asked it to. They are used for what you asked the app to do:
- Your work and settings: routes and waypoints, notes, units and display options, synthetic vision options, your aircraft and checklists. With an account, routes, waypoints and aircraft are also copied to it; the rest stays on the device.
- A flight being recorded or waiting to be uploaded, so a recording survives a closed tab or a lost signal.
- That this device has an account, and who was signed in, so the app still opens with no signal.
- Which guided tours you have seen, and whether the install-on-your-phone hint is due, so they are not repeated.
- A note that you came in through the website. This is in session storage and is gone when you close the tab.
- A service worker, which lets the app open and record a flight with no signal. If you turn notifications on it also receives them and shows them.
- A cache of map tiles, terrain and briefings you downloaded for offline use. You choose when to download it.
None of this is used to recognise you across sites, to measure how you use the site, or for advertising.
The contact form
The form on the home page sets no cookies and stores nothing on your device. What you type is sent to us only when you press the button. The privacy notice says how an enquiry is used and for how long it is kept.
Other companies your browser contacts
To draw the map, some data comes straight from other companies to your browser: map tiles (CARTO, EOX), terrain (Amazon Web Services), and radar and satellite imagery (RainViewer, EUMETSAT). Like any web request, it carries your IP address and the area you are looking at. We ask them for plain images and data, not for cookies, but we do not control their servers. They are named in the privacy notice. Our host, Cloudflare, may also set a strictly necessary security cookie of its own if it needs to protect the site from abuse.
Clearing it, and changing your mind
Because nothing here depends on consent, there is no consent to withdraw, but you can remove everything. Settings has an "Erase local data" button that removes what the app has stored in your browser. Signing out removes the sign-in cookie. Clearing your browser site data removes all of it, and you can block cookies in your browser settings: the app still works, but you cannot stay signed in. If you have a school account, erasing local data does not delete the account: ask for that separately, or do it under Settings.