That is not a promise about how carefully we store them. It is a statement about the architecture: WhereDidIJustFly reads your photos in your browser, and there is no server for them to be sent to. This page sets out what that means in detail, and what the app does put on your device.
Elucidation Labs — General Legal Terms
WhereDidIJustFly is one of several products operated by the same company. The general website terms of use, your rights under UK GDPR, marketing, international transfers, how to complain, and how to manage cookies in your browser are published once, at the address above, and form part of your agreement with us when you use this site.
This annex covers only what is specific to WhereDidIJustFly. Where it covers something, it takes precedence.
We are the Data Controller for the limited Personal Information described below.
Not collected. When you choose photos, your browser reads them locally: the capture timestamp, the compass bearing, and the GPS fix your phone wrote into each file. Every step after that — matching a photo to a point on the flown track, working out which way you were looking, drawing the map, building the postcard — happens on your own device.
There is no upload step, and no server of ours that could receive one. We never see your photos, your positions, your flight, your filenames, or anything derived from the image content.
There are none. No sign-up, no sign-in, no password, no email address. Your saved flights live in your own browser (see the next section) and exist nowhere else.
Off unless you switch it on. The app has one opt-in control, on the accuracy-tips screen you can reach from the home screen and from past flights. Until you tick it, nothing is measured and nothing is sent — not held back and not queued, simply never created.
If you do switch it on, each event we record contains:
Never a coordinate, never a place name, never a timestamp taken from a photo, and never anything derived from image content. Because there is no account, these events cannot be connected to you, and because the identifier is created fresh on every page load, they cannot be used to follow you between visits.
These events are sent to mytaxreality.co.uk/api/track — our sister product, which is where our analytics database lives. Same company, same controller. Switching the control back off stops it immediately, in the same session.
Legal basis: your consent, which you can withdraw at any time by unticking the same box. Retention: event records are deleted automatically after 12 months.
We hold that correspondence and whatever you put in it, so that we can reply. Legal basis: our legitimate interest in answering an enquiry you raised. Retention: only as long as it takes to resolve the matter.
When you share a postcard, the image is drawn on your device and handed to your operating system's own share sheet — you choose where it goes, and it does not pass through us. Including your photos in that card is a separate tick-box, asked for every share, and the answer is deliberately not remembered: a card sent to family and a card posted publicly are different decisions.
A shared flight link carries the journey in the part of the URL after the #. Browsers never transmit that part to a server, which is why it is used — the link works without us ever seeing what is in it.
We set no cookies. None at all.
Audited by direct testing of the live site on 27 August 2026 — the landing page and the app were each loaded and inspected, and no cookie of any type was set: not strictly-necessary, not performance, not functionality, not advertising. No third party sets one through us either.
The app does keep things on your device, using browser storage rather than cookies. Browser storage is readable only by this site, and — unlike a cookie — is never attached to a request and sent anywhere. This is the complete list:
| Name | What it holds | Why |
|---|---|---|
wdjf.journeys |
Your saved flights — the reconstructed route and its captions. | So past flights are still there when you come back. Held on your device only; there is no copy anywhere else, which also means clearing your browser data deletes them for good. |
wdjf.seenTips |
Whether you have seen the first-launch tips. | So the introduction is shown once rather than every time. |
wdjf.shareStats |
Your answer to the usage-statistics opt-in above. | So the choice sticks. Absent means off. |
wdjf.viewRatio |
How you last sized the map against the photo. | A display preference, so the view opens the way you left it. |
wdjf.stylePicker |
Whether the postcard style picker is enabled. | A development flag, off by default. |
wdjf-shell-v11 |
A copy of the app's own files (Cache Storage, used by the service worker). | So the app loads quickly and still works offline. It holds our code, never your photos or your flights. |
Clearing site data in your browser removes all of the above, including your saved flights. How to refuse or delete storage in each major browser is covered in the general cookies policy.
Almost everything the app needs is served from this site, on purpose — the mapping library, the map outlines and the PDF library are all copies held here rather than fetched from someone else's network. These are the exceptions, and each one receives your IP address simply because your browser has to connect to it:
| Who | What for | When |
|---|---|---|
| Cloudflare | Hosts this site and delivers it to you. | Every visit. |
Cloudflare Web Analyticsstatic.cloudflareinsights.com | Counts visits and how quickly the page loaded. It sees the page address, where you arrived from, your browser type, and — from your IP address, which it does not store — your country. It sets no cookie, keeps nothing on your device, and does not fingerprint you by IP or browser, so it cannot recognise you on a later visit or follow you to another site. We see totals, not people. | The landing page only. The app never loads it, so it never sees a flight, a photo, or anything you do in there. |
| Google Fonts, which supplies the typefaces. | Every visit. No cookie is involved. | |
| Amazon Web Services | Public terrain-elevation map tiles, so the map can show relief. | Only once a flight map is drawn, and only for tiles covering that flight's own corridor. |
| mytaxreality.co.uk | Our own analytics endpoint — same company. | Only if you switched usage statistics on. |
We do not sell Personal Information, and we do not share it for marketing. Where any of these process data outside the UK or EEA, they do so under the safeguards described in the general privacy notice.
There is no purchase to make, so there are no terms of sale.
WhereDidIJustFly does not currently sell anything, take payment, or ask you for payment details. When it does, this annex will gain its own terms of sale — written for whatever is actually being sold and however it is actually delivered — and you will see them before you can pay, not after.
Your rights of access, correction, deletion, objection and portability, our position on marketing, international transfers, and how to complain to us or to the Information Commissioner's Office are all set out in the Elucidation Labs General Privacy Notice. Use the contact address above to exercise any of them in relation to this app.
One practical note on access and deletion requests: for most of what this app touches there is nothing for us to give you or delete, because we never had it. Your photos, your flights and your saved journeys are on your device and under your control, and clearing your browser data removes them.
The general website terms of use — site availability, reliance on content, liability, intellectual property and linking to us — are in Part A of the general terms. Reconstructed positions are indicative rather than surveyed; see the app's own explanation of what is measured and what is estimated.