Privacy

The short version. Most of this site works with no account and stores nothing about you. If you join the email list we keep your address. If you make an account we keep your email, your study history and your settings. We use no advertising trackers, we sell nothing to anyone, and you can have it all deleted by emailing hello@runuplab.com.

The email list

What we keep: the address you type into the form. It is stored as a contact at Resend, the US email provider that sends our mail. To slow down abuse, the form also records a one-way hash of your IP address and of the address you entered; those hashes are deleted automatically after 24 hours and are never used for anything but rate limiting.

What we send: launch notes and new-sim announcements, and nothing else. Every note has an unsubscribe link, or reply and say so — a human reads it.

Accounts

The question bank at /study needs a free account. When you make one we store your email address, an optional display name, and what you do in the bank: which questions you answered and what you picked, your study and practice-exam sessions, any question you flag, your written-test date if you enter one, and your email preferences. That is what makes your progress yours. It lives in Supabase, a US-hosted Postgres database; we do not run our own database servers.

Emails an account can get: the confirmation link when you sign up and a reset link if you forget your password, both from no-reply@runuplab.com. The optional weekly digest and missed-question reminders are off unless you turn them on in your study settings; each one carries an unsubscribe link and a one-click unsubscribe header, and we keep a log of which of those we sent you so we never send the same one twice. The same 24-hour hashed-IP rate limit applies to the signup form.

Cookies and your browser

The only cookies are the ones that keep you signed in, set by Supabase. They last up to 400 days or until you sign out. There are no advertising or tracking cookies, so there is no cookie banner — there is nothing to consent to. If the site is ever put behind a password again, a 30-day cookie remembers that you entered it. The glossary study decks remember which cards you marked “got it” in your browser's own storage; that never leaves your device.

Analytics

We use Vercel Analytics, which is cookieless and counts page views in aggregate. It also records two events: when the email form is submitted and when the readiness test is finished. None of it identifies you.

If you train with us

The instructor who runs this site also uses it for flight-school bookkeeping. If you are a student of that instructor, the admin tools hold your name, contact details, lesson records and account balance — the school's own training and billing record, visible only to the instructor and never to other users. Ask the instructor for a copy or a correction.

Deleting your data

Email hello@runuplab.com from the address on the account and we delete the account and everything in the list above by hand, within 30 days. There is no self-serve delete button yet, and we would rather say so than pretend. Flight-school training and billing records are business records and are kept as such.

Purchases

When the guide goes on sale, checkout runs on the payment provider's site under their privacy policy — we never see your card details.

Questions: hello@runuplab.com.