Last Updated: June 21, 2025 | Aviatec Global LLC | Effective Date: June 21, 2025
Aviatec Global LLC ("Company," "we," "us," or "our") operates the PilotQuizz platform at www.pilotquizz.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information. By using PilotQuizz, you agree to this Policy.
⚠️ IMPORTANT: If you do not agree with this Privacy Policy, discontinue use of our platform immediately.
We collect the following categories of information:
| Category | Examples | Source |
|---|---|---|
| Account Data | Name, email address, hashed password | Provided by you at registration |
| Session Data | Login time, unique session token, active session status (active/expired/blocked), login timestamp | Automatically — browser localStorage + server-side Table API |
| Device Data | Device fingerprint (non-PII hash derived from timezone, language, platform, screen resolution), browser user-agent (first 200 chars) | Automatically — collected at login for multi-device session enforcement |
| Usage Data | Modules accessed, quiz scores, progress %, time on platform, selected aircraft type | Automatically — platform activity |
| Technical Data | IP timezone hint (derived from browser Intl API — not your actual IP), browser type, OS, referring URLs | Automatically — browser Intl API + Cloudflare server logs |
| Payment Data | Billing name, last 4 card digits, billing address | Via Stripe — we never store full card numbers |
| Communications | Support emails sent to support@pilotquizz.com | Provided by you |
| Email Delivery Data | Email open/click events for transactional emails | EmailJS / Gmail via our email service |
localStorage (Client-Side): User accounts, session tokens, study progress, quiz history, and language preferences are stored in your browser's localStorage. This data stays on your device. Clearing browser data removes it.
Server-Side Session Table (Genspark API): Active session records — including session token, device fingerprint, timezone hint, and session status — are stored server-side to enforce our 2-device maximum policy. These records are automatically expired on logout and purged after 90 days of inactivity.
Cloudflare Pages: Our platform is hosted on Cloudflare's global CDN. Cloudflare may collect technical data (IP, request headers) per their own privacy policy at cloudflare.com/privacypolicy.
EmailJS: We use EmailJS (emailjs.com) to send transactional emails (welcome, security alerts for unauthorized login attempts). EmailJS processes email addresses as described in their privacy policy.
Stripe (future): Payment data is processed exclusively by Stripe Inc. (PCI-DSS Level 1 certified). We do not store full payment card information on our systems.
We do NOT sell, rent, or trade your personal information. We may share data only with:
We use the following storage technologies:
| Key | Purpose | Type | Where Stored |
|---|---|---|---|
aviaprep_user | Active user session (name, email, plan, selected aircraft) | Session data | localStorage |
aviaprep_session_token | Unique cryptographic session token used to enforce the 2-device maximum policy and detect unauthorized concurrent logins | Security token | localStorage + server Table API |
aviaprep_users_db | Registered user accounts (local cache) | Account data | localStorage |
aviaprep_progress | Module study progress percentages | Study data | localStorage |
aviaprep_guest | Guest mode flag | Preference | localStorage |
aviaprep_lang | Language preference (ES/EN) | Preference | localStorage |
aviaprep_quiz_history | Quiz session history and scores | Study data | localStorage |
aviaprep_cookies_accepted | Cookie consent record | Consent | localStorage |
| Cloudflare cookies | CDN performance, bot protection, security | HTTP Cookie | Browser |
You may clear localStorage at any time in your browser settings. Doing so will log you out and erase local study data. Some platform features require localStorage to function.
Why we use device fingerprinting: To enforce our subscription policy of a maximum of 2 simultaneous active sessions per account and to detect unauthorized credential sharing.
What we collect: A non-reversible hash derived from: browser timezone, language setting, OS platform, and screen resolution. This hash cannot identify you personally — it is used only to distinguish devices.
What we do NOT collect: Your actual IP address, GPS location, hardware identifiers, cookies set by third parties, or any biometric data.
How it works: Each login generates a unique session token stored both locally and in our server-side session table. When a third login attempt is detected, the oldest active session is blocked, a security alert email is sent to your registered address, and you are notified to change your password if the login was not authorized by you.
Data retention: Session records are marked "expired" on logout and automatically purged after 90 days. You can request deletion at support@pilotquizz.com.
Account and progress data stored in localStorage persists until you clear your browser data or uninstall the browser. We do not control localStorage retention on your device. For server-side data (emails, logs), retention is governed by Cloudflare and EmailJS policies. Billing records are retained for 7 years per U.S. IRS requirements.
No system is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law. If you suspect unauthorized access to your account, contact support@pilotquizz.com immediately and change your password.
Depending on your jurisdiction, you may have the following rights:
To exercise any right, contact support@pilotquizz.com. We will respond within 30 days.
PilotQuizz is intended for users 18 years of age or older. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it immediately. Contact support@pilotquizz.com if you believe this has occurred.
Aviatec Global LLC is based in the United States. If you access our platform from outside the U.S. (including Mexico, EU, or other jurisdictions), your data may be transferred to and processed in the United States. By using our platform, you consent to such transfer. For EU/EEA users, we rely on standard contractual clauses or equivalent safeguards.
Our platform integrates with:
We are not responsible for the privacy practices of third-party websites linked from our platform.
We may update this Privacy Policy at any time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.
© 2025 Aviatec Global LLC. All rights reserved. PilotQuizz™ is a trademark of Aviatec Global LLC.