Cookie Policy

1. What are cookies

A cookie is a small text file that a website or application places on your device when you visit it. The cookie can later be read back by the service that set it, or in some cases by a third party whose code runs on the page.

First-party cookies are set by AeroVigil itself. Third-party cookies are set by service providers we work with, such as our payment processor and our analytics provider, when their code is loaded as part of the service.

Session cookies are deleted when you close your browser. Persistent cookies remain on your device for a defined period or until you delete them. We describe each cookie below by its purpose rather than by a fixed name or duration, because these can change as providers update their systems.

We also use technologies that behave like cookies, including browser local storage and similar identifiers. References to "cookies" in this policy cover these technologies as well.

2. How we use cookies

We use cookies for a limited set of purposes that support a secure, reliable, and well-functioning service. We do not use them to build advertising profiles.

• To keep you signed in — so that your authenticated session persists as you move between pages of the product.
• To keep the service secure — including protecting against fraud and abuse, and supporting our content-security and anti-forgery measures.
• To operate the platform reliably — including routing your requests and balancing load across our infrastructure.
• To process payments — where our payment provider sets cookies during checkout to complete your purchase and prevent fraud.
• To understand usage — where you have consented, to measure how the product and site are used so we can improve them.

AeroVigil is a decision-support platform for aviation security risk assessment. Cookies support the operation of that platform; they do not influence the substance of any risk assessment. The operator always remains responsible for the final assessment and operational decision.

3. Categories we use

We group the cookies we use into the categories below. Strictly necessary cookies are always active because the service cannot function without them. The other categories are set only on the basis described.

• Strictly necessary — These cookies are required for the service to work and cannot be disabled through our consent controls. They support authentication and session management (keeping you signed in), security measures including our content-security and anti-forgery protections, and load balancing so that requests are routed correctly across our infrastructure. Without these cookies, parts of the platform such as sign-in cannot operate.
• Analytics — We use Google Analytics 4 to measure how the platform and site are used, so we can understand performance and improve the product. Analytics cookies are set only where consent applies, in line with the consent rules of your jurisdiction. If you do not consent, these cookies are not set and we do not collect analytics in this way.
• Payment & fraud-prevention — When you purchase or manage a self-serve subscription, our Merchant of Record, Paddle (Paddle.com Market Ltd), sets cookies during checkout to process your payment and prevent fraud. These cookies are controlled by Paddle as part of the checkout it operates. AeroVigil never sees or stores your full card number.

We do not use advertising cookies, and we do not use cross-site tracking cookies to follow you across other websites or to build advertising profiles.

4. Managing your preferences

You can control non-essential cookies in two main ways.

• In-product Cookie Settings — Use the Cookie Settings control available on our site and within the product to review and change your consent for non-essential categories, such as analytics, at any time. Withdrawing consent takes effect going forward.
• Browser controls — Most browsers let you view, block, or delete cookies through their settings. You can usually set your browser to refuse some or all cookies, or to warn you before a cookie is set. The exact steps depend on your browser.

Strictly necessary cookies cannot be switched off, because the service depends on them. If you block or delete them through your browser, core features such as signing in and staying signed in may not work.

If you disable analytics cookies, the platform will continue to function, but we will not measure your usage through those cookies. If you block payment and fraud-prevention cookies, you may be unable to complete checkout for a self-serve plan.

5. Third-party cookies

Some cookies are set by service providers acting on our behalf or as independent parties. The main third parties relevant to cookies are set out below.

• Paddle (Paddle.com Market Ltd) — Our Merchant of Record for self-serve paid plans. Paddle sets cookies during checkout to process payment, issue invoices, handle applicable tax, and prevent fraud. For these purposes, Paddle acts as the controller of the payment, billing, tax, and fraud-prevention data it collects. Paddle's handling of this data is described in its own privacy and cookie notices, available on the Paddle website.
• Google (Google Analytics 4) — Our analytics provider. Where you consent, Google sets analytics cookies so we can measure how the platform and site are used. Google's handling of this data is described in its own privacy and cookie notices, available on the Google website.

We do not control the cookies that these third parties set, and their practices are governed by their own notices. We encourage you to review them. Our wider list of processors and sub-processors is described in our Privacy Policy.

6. Changes

We may update this Cookie Policy from time to time, for example when we change the providers we use, the cookies we set, or how we manage consent.

When we make material changes, we will update the "Last updated" date shown on this page and, where appropriate, provide additional notice. Your continued use of the service after an update takes effect means the updated policy applies to you, without prejudice to any consent that is separately required for non-essential cookies.

This policy forms part of our wider terms and notices. See also our Privacy Policy and Terms of Service.