Privacy Policy

XP Flight (“we”) runs xpflight.com. This policy explains what we collect when you visit the site or get on our flight list, what we do with it, and the choices you have. Questions? Email hello@xpflight.com.

What we collect

When you get on the flight list, we collect what you enter in the form:

• Your name and email address (required).
• Your phone number and ZIP code, if you provide them.
• How you heard about us, and whether you already fly, if you tell us.
• Whether you checked the box to receive text messages, and when.

We also record a few details automatically with your signup:

• The campaign tags in the link you followed (for example, which ad or post brought you here).
• Your browser's user-agent string (browser and device type).
• The date and time you signed up, and the version of this policy in effect.

Like most websites, our hosting provider keeps short-lived server logs, including IP addresses, to run and secure the site. We don't use advertising cookies or tracking pixels, and the site doesn't set cookies to follow you.

We count page views ourselves. Each page you open sends the site the page's address, the site that linked you here (if any), any campaign tag in the link, and the country your connection comes from. We don't store your IP address or your browser details with it; a code that changes every day lets us count how many different devices visited that day and nothing more. No cookie is involved.

How we use it

• To tell you about XP Flight: our launch, discovery flights, training, and rentals.
• To plan where and when to offer flights (for example, using ZIP codes to see where interest is).
• To understand which of our posts and ads are working.
• To keep the flight list free of spam and abuse.

Pilot profiles

You can explore the skill tree without an account; your progress is kept under an anonymous browser cookie. If you sign in (by a link we email you, no password), we keep your email address to sign you in, the callsign and display name you choose, your skill-tree progress, and any flights or achievements XP Flight verifies for you. Your callsign, display name, rank, badges and verified logbook appear on your public profile page unless you hide it in your settings. Sign-in is handled by Supabase.

We keep a copy of the FAA's public airmen file: names, certificates and ratings, and the city, state and ZIP code on each record, never a street address. It is not published or searchable by the public. A signed-in pilot can look up their own record and link it to their profile; the link stays private until we have checked the certificate against their ID, and only then does it appear on their card. If your record is in the file you can link it and hide it from that search, or write to us and we will hide it for you; a hidden record stays hidden when the FAA publishes a new file.

Email

We only email you about XP Flight. Every marketing email includes an unsubscribe link, or you can email hello@xpflight.com to stop.

Text messages

We send texts only if you checked the text-message box when you signed up. Texting consent is optional and not required to join. Message frequency varies (up to 4 messages a month), and message and data rates may apply. Reply STOP to opt out at any time, or HELP for help.

We don't share or sell your mobile number or text-messaging consent to anyone for their own marketing.

Who we share it with

We don't sell or rent your personal information. We share it only with service providers that help us run the flight list, under their own security and privacy commitments:

• Vercel, which hosts the website.
• Supabase, which stores the flight list database.
• Email or text-messaging providers we use to contact you, if you opted in to those messages.

We may also disclose information if the law requires it or to protect people's safety.

How long we keep it

We keep your signup while the flight list and our launch communications are active, or until you ask us to remove it. Once your information is no longer needed for these purposes, we delete it.

Your choices

You can ask us to show you the information we have about you, correct it, or delete it. Email hello@xpflight.com from the address you signed up with, and we'll respond within 30 days. Depending on where you live (for example, California or Washington), you may have additional rights under state law. We honor these requests for everyone.

Security

Signups are sent over encrypted connections (HTTPS) and stored in a database that isn't publicly accessible, and access is limited to XP Flight. No method of storage is perfectly secure, but we work to protect your information.

Children

The flight list is for people 13 and older. We don't knowingly collect information from children under 13. If you believe a child has signed up, email hello@xpflight.com and we'll delete it.

Changes

If we change this policy, we'll update the date at the top of this page. For significant changes, we'll tell people on the flight list by email.

Contact

XP Flight · Seattle, WA · hello@xpflight.com