Privacy policy
How SkyWatch handles account, device, location, media, community, and operational data.
Last updated October 24, 2026
Scope and controller
This policy applies to the SkyWatch web application and related SkyWatch mobile applications and services. SkyWatch OSINT is operated by Yehonatan Yanay in Israel, who is the controller of information processed for the service. Questions and privacy requests may be sent to support@skywatchintel.com.
Data we process
Firebase Authentication processes the account information and credentials used for Google or email/password sign-in, including identifiers, email address, user agent and IP address for authentication and abuse prevention. SkyWatch's application database stores an opaque Firebase user identifier, access and preview counters, and links that identifier to forum posts, replies, reports and blocks; it does not store the account name or email. Depending on the features you use, SkyWatch may also process a browser installation identifier and encrypted push subscription; optional location; images and notes submitted for aircraft identification; community content; and security, error and request metadata, including IP address. To manage the one-time introductory ME view, SkyWatch keeps a first-visit flag in local storage until browser data is cleared and a tab-session activity time in session storage; these stay in your browser and are not sent to analytics or advertising partners. The introductory visit ends when the tab session ends or after 30 minutes of inactivity; clearing storage or changing browsers can make the view available again.
Purposes
We use this information to authenticate accounts, provide community features, apply access tiers, administer subscriptions, deliver requested emergency-style notifications, process aircraft identification requests, prevent abuse, moderate objectionable content, secure the service, diagnose failures and comply with legal obligations.
Legal bases
Where applicable law requires a legal basis, processing is based on providing the service you request, our legitimate interests in operating, securing and improving SkyWatch, your consent for optional permissions, notifications and advertising technologies where required, and compliance with legal obligations. You may change your advertising choice below at any time. Other optional permissions can be changed in browser or device settings, without affecting earlier lawful processing.
Location and camera
Location, camera and photo-library access are requested only when needed for a feature. Location is optional for map centering, aircraft identification and satellite pass prediction. Identification images and supplied observation context are sent to the configured AI processor, OpenAI or Google, for the requested analysis. They are not intentionally retained by the SkyWatch backend unless you later choose to publish them to the forum. OpenAI requests disable response storage; provider security and abuse-monitoring retention may still apply. Do not upload images containing private information or operationally sensitive details.
Analytics and performance measurement
Plausible Analytics measures aggregate page views, referral sources, countries, device classes, operating systems and browsers without cookies, persistent identifiers or cross-site tracking. Vercel Speed Insights separately measures aggregate performance and Web Vitals. SkyWatch does not send a Firebase user identifier, account email or precise location to Plausible. Separately, the forum stores a random browser identifier in local storage and a per-discussion hash on the server to count approximate unique browser viewers. Clearing browser storage or changing devices can increase that count; it is not a verified count of people.
Optional Meta advertising measurement
With your permission, SkyWatch uses Meta's Conversions API to measure paid Intelligence subscriptions from our Facebook and Instagram ads. We send only an actual ad-click identifier when available, your browser's user-agent, the paid amount, currency and purchase time, and a random event identifier. We do not send your email, name, IP address, account identifier, card details, photos, precise location or map activity. Your separate choice and click attribution are kept for up to seven days. Meta may process data outside your country. Declining does not affect access or checkout. You can withdraw here or in Privacy settings; withdrawal stops future sends but cannot recall information already sent.
Checking measurement preferences… You can continue using SkyWatch.
Advertising
FREE and OBSERVER access may include first-party SkyWatch plan promotions, advertising inside aircraft, vessel and satellite cards, and periodic sponsor breaks. OBSERVER sponsor breaks are less frequent and use shorter inventory; INTELLIGENCE is ad-free. If you allow third-party ads, Adsterra may receive your IP address, browser and device information, page or ad interactions, and may use cookies or similar storage for ad delivery, fraud prevention, measurement and possibly personalization. Adsterra may process this information outside your country. SkyWatch requires an affirmative advertising choice before entering Free or Observer content; declining or withdrawing that choice ends access to that content until a new choice is made. Intelligence subscribers can sign in without advertising. SkyWatch does not request third-party ads before your affirmative choice. Withdrawing a choice prevents new ad requests after the page reload; it cannot undo data already sent or necessarily clear storage set by an advertising partner.
Advertising choice
You have not made an advertising choice. Free and Observer content requires a choice before entry.
Service providers
SkyWatch uses infrastructure and technology providers that include Firebase and Google for authentication, OpenAI or Google for AI processing, Railway for backend hosting, Vercel for web delivery and performance measurement, Plausible Analytics for aggregate website analytics, mapping and data providers for live layers, browser push services, Lemon Squeezy as merchant of record when paid billing is enabled, and Adsterra for consented third-party banners. Google advertising services may be used only if their inventory is separately enabled and you have allowed third-party ads. SkyWatch sends the merchant of record the account email needed to prefill checkout and an opaque account identifier used to link subscription status; payment-card data is entered directly with and processed by the merchant of record. For limited subscription promotions, SkyWatch also retains a limited eligibility record linked to the account identifier and a hash of the checkout email, rather than an additional raw-email copy, to enforce one offer per customer and prevent repeated claims. Data is shared only as needed to operate the selected feature or meet legal and security requirements.
Retention and deletion
We retain data for as long as needed to provide the service, maintain security and moderation records, meet legal requirements and resolve disputes. You may delete account data from Settings or follow the public account-deletion instructions. Some limited records may be retained where legally required or necessary for fraud, abuse and security protection.
Security and transfers
We use access controls, encrypted transport and operational safeguards. No internet service can guarantee absolute security. Providers may process data in other countries subject to their contractual and legal safeguards.
Children
SkyWatch is not directed to children and is intended for adults. We do not knowingly solicit personal information from children.
Your choices
You can deny location, camera or notification permission, change your advertising choice above, use public read-only features without an account, sign out, delete your account data and contact us about access, correction or deletion requests.
Privacy rights and complaints
Depending on applicable law, you may request access, correction, deletion, restriction or objection, and may withdraw consent. You may also complain to the privacy authority in your jurisdiction, including the Israel Privacy Protection Authority where applicable. Contact support to exercise a right; we may request limited verification before acting.