Draft for Steve’s review — plain-language policy written for TurbineWire; final wording pending Steve’s review. Not reviewed by a lawyer.
Privacy Policy
TurbineWire (turbinewire.com, “we”) publishes sourced aviation incident reports. This policy explains what data we collect, why, who we share it with, and the choices you have.
1. What we collect
- Comments. When you submit a comment we store your display name, email address (never shown publicly), comment text, the incident it belongs to, submission time, and a hashed/derived network identifier used for rate-limiting and abuse prevention. Comments are moderated before publication.
- Bot protection. Comment forms use Cloudflare Turnstile, which processes device and browser signals to tell humans from bots. See Cloudflare’s privacy policy.
- Server and security logs. Our host, Cloudflare, processes IP addresses, user-agent, and request data to deliver and protect the site.
- Analytics. We may use Cloudflare Web Analytics, which is designed to measure traffic without cookies and without tracking individuals across sites.
- Email. If you write to us, we keep your message and address to respond.
- Consent choice. We store your cookie choice in your browser’s local storage.
2. Advertising and cookies (Google AdSense)
We may display ads served by Google and its partners. In that case:
- Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites.
- Google’s use of advertising cookies (including the DoubleClick cookie) enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
- You may opt out of personalized advertising by visiting Google Ads Settings (adssettings.google.com). You can also opt out of some third-party vendors’ use of cookies for personalized advertising at aboutads.info and, in the EU/UK, youronlinechoices.eu.
- Learn how Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.
- Other third-party vendors or ad networks may also serve ads; if added, they will be listed here.
Consent. Visitors in the EEA, UK and Switzerland see a consent banner; advertising and analytics storage stay off (Google Consent Mode v2 “denied”) unless you accept. You can change your choice at any time via “Cookie settings” in the footer. Members of a future ad-free tier will not be shown ads.
3. Why we use data (legal bases)
- To run, secure and improve the site (legitimate interests).
- To moderate and display comments you choose to submit (contract / legitimate interests).
- To show advertising and measure it (consent where required; otherwise legitimate interests).
- To comply with law.
4. Sharing
We do not sell your personal information for money. We share data with service providers that run the site — Cloudflare (hosting, security, database, Turnstile) and, if ads are enabled, Google and its ad partners as described above. Under California law, ad-cookie sharing may count as “sharing” for cross-context behavioral advertising; you can opt out as described below.
5. Retention
Published comments are kept while the incident page is online. Rejected comments and abuse records are deleted or anonymized within about 12 months. Emails are kept as long as needed to handle your request.
6. Your rights (GDPR / UK GDPR)
You may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. You may complain to your local data protection authority.
7. California (CCPA/CPRA) and other U.S. state rights
You may request to know, delete or correct personal information, and opt out of sale/sharing for targeted advertising — use “Cookie settings” → Reject, Google Ads Settings, or email us. We honor Global Privacy Control signals where required. We will not discriminate against you for exercising your rights.
8. Children
TurbineWire is not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect their data.
9. International transfers
Our providers may process data in the United States and other countries under appropriate safeguards.
10. Changes
We will update this page and its date when practices change.
11. Contact
Privacy questions or requests: [email protected] · Contact page.