Privacy

Last updated 23 October 2026.

AvStick keeps as little about you as it can. Everything it keeps is stored with Amazon Web Services (AWS) in the United States, except support emails, which are forwarded to the operator’s Gmail inbox. We don’t sell your data or share it with anyone.

What we keep, and where

• Your sign-in, in Amazon Cognito (the AWS sign-in service): your email address and a hash of your password, never the password itself. If you turn them on, it also keeps your authenticator app’s secret key and your passkeys’ public keys.
• Your account, in our database: your account ID (a random identifier from sign-in), your SkyView serial numbers, the labels you give them, your pack IDs, and when each was added and last reported. The database holds no email address.
• Logs, kept for 90 days: your account ID, whether the request came from the website or the Mac app, what was asked for, the result, and the browser or app version. Logs never hold sign-in tokens, email addresses, labels or IP addresses. When the app downloads plates and data, those download logs hold no IP address either.
• Support email: mail you send to support@avstick.com is stored for 30 days on AWS and forwarded to the operator’s Gmail inbox.
• Your Mac only: the flight and engine logs AvStick copies off your stick, and anything it works out from them, stay on your Mac. AvStick never uploads them.

Labels

A label is the name you give a device, such as “Club RV-7”. It holds a tail number only if you type one. AvStick never fills one in for you.

No analytics, no cookies of our own

AvStick runs no analytics and sets no cookies of its own. When you sign in, our sign-in pages, auth.avstick.com, set a cookie that keeps you signed in for up to an hour. It is strictly necessary for signing in.

While you’re signed in, the website keeps your sign-in only in the open tab’s memory. The tab’s own storage holds a note that you’re signed in, so that reloading the page can sign you in again. While you sign in, it also briefly holds a one-time check that the sign-in is yours. Closing the tab removes all of them.

Email we send

AvStick emails you only to check your email address and to reset your password. It sends from no-reply@avstick.com.

If one of these emails can’t be delivered, or you mark it as spam, AWS sends a notice of that to the operator’s alert inbox. The notice includes your email address. The operator uses it only to keep AvStick’s email working.

Deleting your account

Delete my account, on the account page, deletes your account straight away. It removes your devices, labels and packs from our database, deletes your sign-in (email address, password, authenticator app and passkeys), and signs you out everywhere. Removing a single device deletes it at once.

What remains after you delete your account:

• database backups, for up to 35 days;
• logs that name only your account ID, for up to 90 days;
• any email you sent to support, in the support inbox;
• any notice that an email to you couldn’t be delivered or was marked as spam, in the operator’s alert inbox.

Questions

Email support@avstick.com.