Privacy

Browsing WingJobs stores nothing about you. An account, which only serves email alerts, keeps your email, your pilot profile and your alert settings — and you can delete all of it in one click.

Who is responsible

WingJobs is published by Simon Dumas, sole trader (entrepreneur individuel) trading as Wing Aero Systems; address, registration and host are in the legal notice. For anything about your data — a question, a request, a complaint — write to contact@wingaerosystems.com.

Without an account

Nothing about you is stored. The pilot profile you fill in (hours, licence, type ratings) stays in your browser; it travels with each search only so the server can weigh the jobs against it, and is neither written to the database nor to the server logs.

Like any web server, ours keeps technical logs (IP address, page requested, time) to diagnose faults and fend off attacks. The access log is kept 14 days, then deleted.

An address that attacks the server, by guessing passwords or probing for known flaws, is blocked automatically and reported to CrowdSec, a shared blocklist. Ordinary visits are never reported.

When you open a job posting from WingJobs, the server adds one to that job's click count. Nothing else is recorded with it — no IP address, no identifier.

The “Support” and “Buy us a coffee” links lead to Ko-fi, which takes tips on its own site under its own privacy policy, with Stripe handling the payment. WingJobs loads nothing from Ko-fi; it only counts which link was clicked, again without IP address or identifier, and never learns who tipped.

When you arrive from another site — a search engine, an assistant, a social network — the server notes the name of that site and the page you landed on, to learn where readers come from. Again, no IP address and no identifier.

Each page you open also tells our server, from the page itself: the page, the site you came from if it is your first page, and whether your screen is a phone, tablet or computer. That is how we count readers without a third-party script. No IP address, no identifier, no cookie.

With an account

An account exists only to send you job alerts by email. It holds:

• your email address — to sign you in and send the alerts;
• your pilot profile — to pick the jobs you qualify for;
• your alert settings — frequency, the jobs you want, the filters;
• a few dates — account creation, last sign-in, last alert sent, and when your alert was switched on or off. When the account is deleted, that history loses any link to you.

The legal basis is the service you asked for (GDPR art. 6(1)(b)). Nothing is sold, rented or used for advertising.

Sign-in without a password. The link we email works once and expires after 15 minutes; the session it opens lasts 90 days. Both are stored only as a one-way fingerprint, never in readable form. To cap how many links can be requested, the server counts requests per IP address in memory; that count is never saved.

The alert emails

An alert lists up to 20 new jobs, each linking to the operator's own page. Its footer mentions Wing Aero Systems, the company that makes WingJobs. It is a link, not a mailing list: your address serves this alert only, and is never passed to anyone else. Every alert carries a one-click unsubscribe link.

How long

• Your account stays until you delete it — Alerts → Delete my account removes it at once from the database.
• An account nobody has signed in to for 3 years is deleted automatically. We email you 30 days before; signing in keeps it.
• Daily backups keep a copy for 7 days, after which a deleted account is gone for good.
• Expired sign-in links are erased a day after they expire; sessions end after 90 days, or when you sign out.

Who else handles it

• Hostmyservers hosts the server and its database, in France.
• Resend delivers the emails, from its European region. Resend is a US company; transfers are covered by the EU standard contractual clauses.

Your browser also reaches two services directly:

• OpenStreetMap serves the map tiles, and sees your IP address when it does;
• GoatCounter counts visits without cookies and without identifying you.

Fonts and operator logos are served by WingJobs itself.

Cookies and browser storage

One cookie, wj_session, set only when you sign in and needed to keep you signed in. Your browser's local storage keeps your theme and your pilot profile. None of this tracks you, which is why there is no consent banner.

Your rights

You can see and correct your data at any time in the app, and delete it in one click. You may also ask for a copy, object to a processing, or ask for anything else the GDPR grants you, at contact@wingaerosystems.com. If the answer does not satisfy you, you can complain to the CNIL (cnil.fr).

Last updated 2026-11-09.