VIC-AIRby Agentic I.C.EPrivacy Policy
Last updated 20 October 2026
VIC-AIR (agenticice.dev) is run by Agentic I.C.E. This page explains what the app stores and why. We collect as little as we can.
From version 1.5.0 VIC-AIR is free and public. You can use the map, aircraft list, tracks, alerts, road pins and driving directions without an account. An account is only needed for push notifications (alerts when the app is closed).
On your device
- Settings on your device. Your alert settings, radius, dropped pin or last location, recent alert history, and recently seen aircraft and their track lines are saved in your browser's local storage. They stay on your device and are not sent to us. Clearing your browser's site data removes them.
- Your location. When you tap Use my location, your browser gives the app your position. It is used inside your browser to work out distances and nearby alerts. It is only sent to our server if you turn on push notifications with nearby alerts (rounded to about 100 m, see Notifications) or post a community report (the rounded position of that report).
- Notifications. If you turn on notifications while signed in, your browser gives us a push address for this device (from your browser's push service, for example Google, Mozilla or Apple) and we store it on our server (Cloudflare) with your alert settings: takeoff and nearby alerts on or off, your radius, quiet hours, and, if nearby alerts are on, your location or dropped pin rounded to about 100 m. A scrambled (hashed) form of your account ID links it to you. Our server checks POL aircraft every minute and sends alerts through your browser's push service, so they arrive when the app is closed. We also keep a short record of which alerts were sent (to avoid repeats) and how many this month. Signing out, deleting your account, or your browser cancelling the push address removes it.
Road pins
- Dropping a pin sends the pin type, your short note (if any), the map position of the pin (rounded to about 1 m) and the time to our server (Cloudflare D1). Pins are anonymous: we store a scrambled (hashed) form of your network (IP) address with each pin only to enforce drop limits and one report per person. Pins are hidden after 60 minutes and deleted from our database within 24 hours.
- Reporting a pin stores the pin and the hashed network address, so each person can only report a pin once. Pins with 3 reports are hidden; the owner can delete any pin.
- Do not put personal information (names, number plates, phone numbers) in pin notes.
Driving directions
- When you search for a destination, your search text and an approximate position (to about 10 km) go through our server to Photon (komoot, OpenStreetMap data). When you ask for a route, your start point (your GPS position or the map centre) and destination go through our server to the public OSRM routing service. Our server sends them without your IP address and keeps answers in a short cache (up to a day for searches, two minutes for routes). We do not keep a history of your trips.
- While you navigate, your GPS position stays in your browser. It is only used to move the map and pick the next turn.
- Tapping Google Maps, Waze or Apple Maps opens that service with your destination; their own privacy policies apply.
Feedback
- Feedback and suggestions you send with the Feedback button are stored on our server (Cloudflare) with the type you chose, your message, your email if you give one, your account ID if you are signed in, the app version, a short browser and device description (for example "Android 14 Chrome/130") and the time. A scrambled (hashed) form of your network (IP) address is kept with it to stop spam. Only the site owner can read it. It is deleted when we have dealt with it, and automatically after 12 months.
If you create an account
- Sign-in is provided by Google Firebase Authentication. Firebase stores your email address, a password hash (email sign-up) or your Google account ID, your name if you give one or sign in with Google, and whether your email is verified.
- Account record. Our server keeps a small record linked to a scrambled (hashed) form of your account ID: your role and when the record was created. Everything is free; there are no paid plans.
- Community reports (when that feature is switched on) store the report type, your short note, a rounded map position, the time, flags from other users, and a hashed form of your account ID. Reports delete themselves after 1 to 3 hours.
- Abuse limits. To stop spam we keep short-lived counters linked to a hashed form of your account ID and your network (IP) address. They are deleted after about two hours.
- Deleting your account. Menu › Account › Delete account removes your Firebase account, your account record and the reports you posted.
Services the app uses
- Cloudflare hosts the site and its server functions. Like any web host, it handles your IP address and basic request details to deliver the site.
- Google Firebase handles sign-in (only if you sign in).
- Photon (komoot) and OSRM provide destination search and driving routes, through our server.
- Aircraft data comes from the community ADS-B networks adsb.lol and adsb.fi. Our server fetches it for you. If our server cannot reach them, your browser may contact adsb.lol directly.
- Maps come from OpenFreeMap (OpenStreetMap data). The map library is loaded from unpkg.com or jsdelivr.net, and the sign-in button font from Google Fonts. These services see your IP address when your browser loads them.
We do not sell personal information, show ads, or use analytics or tracking cookies.
Contact
For privacy questions or requests, contact Agentic I.C.E through agenticice.ai.