Privacy Policy
Last updated: 26 October 2026
The DroneClearance web app collects only the data needed to request and fly your drone flights. We never sell your data or use it for advertising.
This policy covers the DroneClearance web app at app.droneclearance.nl. The web app is part of the DroneClearance platform, with Nexus, the system in which area managers review flight requests. The DroneClearance mobile app has its own privacy policy. DroneClearance is operated by Webhoes, Almelo, the Netherlands ("we", "us"). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR).
Data we collect
The web app collects account, team, flight and technical data, and only when you use the matching feature.
| Data | What exactly | When |
|---|---|---|
| Account data | Name, email address, password (stored only as a hash), optional profile photo, and the secret for two-factor authentication if you turn it on | When you create an account or change your profile |
| Team data | Team name and company, operator registration number and operational authorisation number, the team's members and the email addresses you invite | When you set up or manage your team |
| Pilots and equipment | Pilots (name, phone, email, licence number), drones (name, manufacturer, model, serial number, maximum take-off weight) and docks (name, model, serial number, location) | When you add them, or when your team imports them from DroneDeck |
| Flight requests | Flight area, maximum altitude, start and end time, purpose of the flight, operator details (name, email, phone, company), pilot details (name, phone, licence number) and drone details (name, manufacturer, model, serial number) | When you request a flight |
| Messages | Messages and responses to proposals when coordinating a conflict with other operators and area managers | When you send a message or accept or reject a proposal |
| Cookies | A session cookie that keeps you signed in, a security token against forged requests (XSRF-TOKEN) and, if you choose "Remember me", a cookie that keeps you signed in longer | When you use the web app |
| Technical data | IP address, browser and basic request data | Every time your browser contacts our servers |
The web app does not use analytics, advertising or tracking cookies.
If your team links DroneDeck, DroneDeck sends us the team's drones, docks and members. A member DroneDeck adds gets access to the team, with a new account if their email address is not known yet; their phone and licence number come along when DroneDeck has them. Passwords are not shared.
How we use your data
We use your data only to provide the DroneClearance service to you.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Sign you in and keep you signed in | Account data, cookies | Performance of a contract (Art. 6(1)(b)) |
| Manage your team, pilots and equipment | Team data, pilots and equipment | Performance of a contract (Art. 6(1)(b)) |
| Request, review and fly flights | Flight requests, messages | Performance of a contract (Art. 6(1)(b)) |
| Send you the emails the service needs (email verification, welcome, team invitations, being added from DroneDeck, password resets) | Account data, team data | Performance of a contract (Art. 6(1)(b)) |
| Keep the service secure and working, and fix errors | Technical data | Legitimate interest (Art. 6(1)(f)) |
We do not use your data for profiling or automated decisions.
Who we share data with
We never sell your data. A flight request is meant to be reviewed, so the area managers of the zones your flight passes through see your request, including the operator's and pilot's contact details and your messages. Other operators in a conflict with your flight see your messages and the time and area of your flight. Apart from that, the web app works with these services:
| Service | What it receives | Why |
|---|---|---|
| Nexus (nexus.droneclearance.nl) | Your team's operator details, docks, flight requests and messages | Area managers review your flight requests there |
| Zonestack | The flight area you draw, IP address | Looks up the airspace zones that apply to your flight area |
| DroneDeck | Your team's link to DroneDeck | Imports your team's drones, docks and members, if your team links DroneDeck |
| Mapbox | IP address, the map area you view | Shows the map |
| Google Fonts | IP address | Loads the fonts the web app uses |
| Flare | IP address, browser, the page and request data when an error happens (passwords are left out) | Tells us about errors so we can fix them |
| Backup storage (Hetzner Storage Box and Backblaze B2, in the EU) | A copy of our database | Restores the service after a failure |
Mapbox and Google may process data outside the EU. Where that happens, transfers are covered by the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. We also share data when the law requires it.
Retention and security
We keep your data as long as your account exists, and delete it after you close your account unless the law requires us to keep it longer.
- In your browser: the session cookie is deleted when you sign out or close the session; the "Remember me" cookie when you sign out.
- Flight records: flight requests and messages belong to the record of the flight and are kept as long as aviation rules and the area managers require.
- Backups: database backups are kept for a limited period and then removed.
All traffic between your browser and our servers is encrypted with HTTPS. Access to your data is limited to the area managers involved and to staff who need it to run the service.
Your rights and deleting your account
You can ask us at any time to see, correct, export or delete your personal data. Under the GDPR you have the right to:
- access the personal data we hold about you
- have incorrect data corrected
- have your data deleted
- restrict or object to how we process your data
- receive your data in a portable format
- withdraw consent at any time
Deleting your account: email us at the address under Contact and ask us to delete your account. We delete your account and personal data within 30 days. Flight records we must keep by law are anonymised instead of deleted.
We reply within one month. You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Children
DroneClearance is a professional tool for drone operators and is not intended for children under 16. We do not knowingly collect data from children.
Changes to this policy
When we change this policy, we update the date at the top. If a change is significant, we tell you in the web app or by email.
Contact
Webhoes – DroneClearance
Almelo, the Netherlands
Email: privacy@droneclearance.nl
Website: droneclearance.nl