Privacy Policy

Your email address.It’s the only thing we require to create an account. We use it to sign you in (we’re passwordless: we email you a code) and for a very small number of operational messages. We will never send you marketing, newsletters, or “engagement” email. We don’t do that.

Your public profile, if you fill it in. Display name, handle, avatar, and bio are optional (we generate sensible defaults) and are public. They appear next to your contributions.

Your home postcode, if you choose to share it. This one deserves a full explanation. If you save a home postcode, we convert it to an approximate map point, postcode-level only, never your address, never anything precise. We use it for exactly one thing: automatically telling local reviews from visitor reviews, which makes course ratings fairer and more useful for travellers. Your postcode and the approximate point are private by default and never shown publicly or included in any data feed. You can leave it blank forever; the review form will simply ask you to tap “Local” or “Visitor” yourself.

Your contributions. Reviews, ratings, condition updates, photos, and course edits are the whole point of FlySpot and are public, credited to your display name. When you upload photos we automatically strip the hidden metadata (EXIF), including any GPS location your camera embedded · so a photo taken at home doesn’t quietly reveal where home is.

Boring technical stuff.Like every website, our infrastructure sees IP addresses in server logs and uses them for rate limiting and abuse prevention (including Cloudflare Turnstile, which protects the sign-in system from bots, and which may run invisibly, with no visible challenge). We use privacy-friendly, cookie-less analytics to count visits in aggregate. We also keep a few anonymous counts of our own, such as how many reviews get started and how many get finished, which is how we notice when something is broken. Those counts carry no account, no name and no IP address, and the random tag that ties them together lasts only until you close the tab. If your browser asks not to be measured, through Global Privacy Control or Do Not Track, we skip them entirely. We don’t track individuals around the web, and we don’t use advertising or cross-site tracking cookies. The only cookies we set are the ones that keep you signed in. Contribution drafts are saved in your own browser’s storage, on your device, so you never lose a half-written review.

• No selling or renting your data. To anyone. Ever.
• No ads, no ad trackers, no data brokers.
• No publishing your email, postcode, or approximate home location. These never appear in any public page or API feed.

Our database (including your email and postcode, if provided) is hosted with Supabase in Sydney, Australia. Some supporting services are global: our web hosting and image delivery use worldwide content-delivery networks (Vercel and Cloudflare), sign-in emails are sent via Resend (US-based), and if you sign in with Google, Google processes that sign-in under its own privacy policy. These providers act as our infrastructure and don’t get to use your data for their own purposes beyond providing the service.

FlySpot provides course information to partner organisations such as Australian Disc Golf and state bodies via our API. These feeds contain course and contribution data only · never emails, postcodes, or home locations.

Your account exists until you delete it. Contributions stay published while they comply with our moderation policy. Server logs and database backups are retained briefly for security and disaster recovery (backups are automatically deleted after 30 days) and then gone.

• See and fix your data:everything we hold about you is visible and editable in your profile and settings. If something’s wrong and you can’t fix it yourself, email us.
• Delete your account: available in Settings, effective immediately. You choose what happens to your contributions:
  • Anonymise (default):your account, email, postcode, and profile are erased; your reviews, photos, and condition updates remain, credited to “Former contributor,” so the community record you helped build survives. (Your contributions were shared under a Creative Commons licence, which permits this, see the Terms.)
  • Delete everything: your contributions are removed too, and your photos are purged from storage.
• Complain:we’d rather you email us first at hello@flyspot.com.au· a human (the same one who runs the site) will reply. If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

FlySpot is a general-audience site about an outdoor sport. You must be at least 15 to create an account. We don’t knowingly collect personal information from children below that age; if you believe we have, email us and we’ll delete it.

If this policy changes materially, we’ll note it here with a new date and mention it on the site. We won’t quietly get worse.

Contact: hello@flyspot.com.au