Privacy
Privacy notice
Last updated: 6 May 2026
What I collect
If you accept analytics, Aeronauty records first-party page views and engagement summaries: page path, page title, referrer, browser user agent, approximate country/region/city from Vercel geolocation headers, Vercel execution region, viewport size, timestamp, anonymous session identifier, active dwell time, scroll depth, and which article sections or figures were visible. I do not store mouse positions, keystrokes, heatmaps, or the raw IP address; only a short HMAC hash of the IP is stored. If you log into the private lab, I also record the email address you used, whether you used Google SSO or a magic link, and which private lab pages you open.
Why I collect it
I use this to understand which private drafts, demos, and articles people actually use, where performance problems show up, and which parts of the site are worth more server time.
Consent
Analytics page views and engagement summaries are only sent after you accept the notice. Your choice is stored in browser local storage; the anonymous session identifier is stored in session storage and resets with the browser session. You can clear site data in your browser to reset both. Essential authentication cookies for the private lab are used when you sign in, and private lab access is logged as part of providing gated access.
Who sees it
The activity log is for me. Infrastructure providers such as Vercel, Upstash, Resend, and Google may process data as part of hosting, storage, email delivery, and SSO.
Retention
The first-party activity log keeps rolling recent records rather than an indefinite archive. Current implementation keeps up to 5,000 recent activity events and up to 5,000 recent engagement summary events.
Contact
If you want me to remove activity tied to your email address, contact me directly.