Privacy Policy
Last updated: June 2026
What we collect
When you register, we store your name, email, and password hash (bcrypt). We never store passwords in plain text. When you study we record progress events — which lessons you have viewed, flashcards you have rated, and quizzes you have taken — so we can show you your progress and surface weak areas.
Cookies
We use a single first-party session cookie (aviatortutor_session) to keep you signed in. It is HTTP-only and SameSite=Lax. We do not use analytics or marketing cookies in v1.
What we never do
- Sell your data to third parties.
- Email you marketing material without explicit opt-in.
- Share your study history with anyone outside AviatorTutor.
Your rights
You can request a copy of your data, or full deletion of your account, by emailing the address on the contact page. We respond within 30 days.
Hosting
The platform is hosted on Namecheap shared hosting in the United States. Database backups are taken regularly and stored on the same provider.
Updates
We may update this policy as the product evolves. Material changes will be highlighted here and emailed to active subscribers.