How Clear2Land uses your data.
Last updated: 16 July 2026.
Controller and contact. Christopher Robinson, the owner and operator of Clear2Land in the United Kingdom, is the data controller for this service. For access, correction, deletion or any privacy question, email [email protected].
What we process and why.
Sign-in uses Authentik and an OpenID Connect token. Clear2Land stores the token's stable account identifier, then stores details you submit: callsign, home base, simulator preferences, aircraft text, virtual airline name, ICAO, hub, livery and membership, plus manual logbook callsign, route, aircraft and grade. Cloudflare and Authentik also process the technical request, IP and security data needed to deliver and protect sign-in and the site.
We use this data to provide the account, reserve unique callsigns and airline ICAO codes, save your requested profile, airline and manual entries, keep the session secure, prevent abuse and diagnose service faults. We do not collect automatic verified flight evidence on this site, sell personal data, serve ads or run third-party analytics.
Lawful bases. We process the account and data you ask us to store because it is necessary to perform the service you request. We use limited security, reliability and abuse-prevention data for our legitimate interests in operating a safe service. We do not intentionally request special-category personal data; do not place it in free-text fields.
Where it goes and how long it stays.
Cloudflare hosts the site, Pages Functions and D1 database and provides network security. Authentik provides identity and sign-in. These services process data only to operate Clear2Land. Cloudflare may process data outside the UK under its contractual international-transfer safeguards. We do not disclose account data to other organisations unless required by law or needed to protect the service and its users.
The c2l_session cookie expires after seven days and is cleared when you
sign out. Account, profile, airline and manual logbook rows remain while you
use the pre-release service or until you ask us to delete them. Provider
backups and security logs may retain residual copies until their normal
protective rotation completes. If Clear2Land closes this account service,
we will delete or anonymise the application data when it is no longer needed.
The session cookie and Authentik's sign-in cookies are strictly necessary for the service and security. Temporary PKCE sign-in state is held in your browser session storage and removed after every callback attempt, whether sign-in succeeds or fails. We set no advertising or analytics cookies.
Your rights.
UK data-protection law may give you rights to access a copy, correct inaccurate data, request deletion, restrict processing, object to processing based on legitimate interests, and receive data you supplied in a portable form. Email the controller to exercise a right. Some rights depend on the circumstances, and we may retain the minimum information required for legal or security reasons.
Clear2Land does not use automated decision-making or profiling that has a legal or similarly significant effect. First-come callsign and ICAO checks are service validation only. You can complain to the Information Commissioner's Office if you are unhappy with how we handle personal data.