// legal

Privacy Policy

Last updated: 14 August 2026

LibAtlas (libatlas.org) is the hub of the Atlas family of data-visualization sites. This page explains, in plain language, what data this site collects, why, and what rights you have over it. The short version: no advertising, no data sales, no tracking cookies — only privacy-preserving traffic measurement and the minimum needed to keep the site secure.

01Who runs this site

LibAtlas is published by an independent individual creator (ApoStructura) on a non-commercial basis. For anything related to this policy or your data, contact flightatlas.contact@gmail.com.

02Traffic measurement (what we collect)

This site measures its traffic on its own servers, at the network edge, rather than with third-party tracking scripts. For each request we record: the page path, the referring site, your country and city (derived from your connection by our hosting provider, never stored as coordinates), your browser family and device class (phone, tablet, desktop — derived from the user-agent string), and the time of the request.

To count visits and returning visitors without identifying anyone, each visitor is assigned a pseudonymous identifier: a salted SHA-256 hash computed from the site, your IP address, and your user-agent string. Your raw IP address is not stored by the analytics; only the irreversible hash is used, and it never leaves our datastore. We cannot use it to identify you, and we do not try to.

The same system classifies non-human traffic (search-engine crawlers, AI assistants, automated agents) by user-agent so we can tell people apart from bots. No analytics cookies are used, no cross-site tracking takes place, and nothing about your visit is shared with advertisers — there are none.

Retention: daily aggregate counters are kept for 90 days. Per-visit session records expire after 48 hours. The legal basis for this processing is our legitimate interest in understanding how the site is used and keeping it secure (GDPR Art. 6(1)(f)).

The site also uses Vercel Web Analytics, a cookie-free, aggregated page-view counter provided by our hosting platform.

03Security logging

This site hosts a private, password-protected analytics dashboard. Login attempts to it (successful or failed) are recorded with their IP address in a short security log capped at the most recent 500 entries. This is standard abuse protection, kept only for security purposes (GDPR Art. 6(1)(f)). Regular visitors browsing the public site never appear in this log.

04Cookies and local storage

Browsing this site sets no cookies. Your light/dark theme choice is saved in your browser's local storage and never sent to us. The only cookie this site can set is a strictly necessary authentication cookie, created only after a successful login to the private dashboard — if you don't log in, you'll never receive it. Because we use no non-essential cookies, there is no cookie banner.

05Third parties (processors)

Two service providers process data on our behalf, under their own data-processing agreements:

  • Vercel (Vercel Inc., USA) — hosts the site, serves it from its edge network, and provides the cookie-free web analytics mentioned above. As the host, Vercel processes connection data (including IP addresses) to deliver the site, as any web host does.
  • Upstash (Upstash Inc., USA) — the database where the aggregated traffic counters and hashed visitor identifiers described above are stored.

We do not sell, rent, or share your data with anyone else, and no advertising or marketing service receives anything from this site.

06Your rights

Under the GDPR and similar laws you have the right to access, rectify, and erase personal data about you, to object to processing, and to lodge a complaint with your supervisory authority (in France, the CNIL — cnil.fr). Note that because our analytics stores only irreversible hashes, we generally cannot link any stored data back to you as an individual — which also means there is usually nothing identifiable to retrieve or erase. For any request, write to flightatlas.contact@gmail.com and we will respond within 30 days.

07Hosting (legal notice)

This site is published non-professionally by an individual. Host: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, United States — vercel.com.

08Changes

If this policy changes materially, the date at the top of this page will be updated. The current version always lives at libatlas.org/privacy.