Preliminary version, pending legal review.
Privacy Policy
Effective October 16, 2026.
This policy is provided by Sortie Research, the operator of this site ("Sortie Research", "we", "us").
This policy explains what personal information we collect when you use waitlist.sortieresearch.com, sortieresearch.com and related services (the "Service"), why, and what choices you have.
1. What we collect
Waitlist (waitlist.sortieresearch.com)
When you join the waitlist, we store the following in Cloudflare Workers KV, a storage service run by our hosting provider, Cloudflare:
- your email address;
- the date and time you signed up;
- your country, as estimated by Cloudflare from your connection;
- your browser's user agent string (up to 200 characters; it describes your browser and device type).
We also use your IP address briefly to prevent abuse. It is kept in a short-lived rate-limit counter that expires after about 10 minutes, and it is sent to Cloudflare Turnstile to check that you are not a bot. A hidden form field is also used to detect bots. We do not store your IP address with your waitlist entry. Signing up again with the same email does not create a second entry.
Sign-in (subscriber dashboards)
Sign-in is handled by Cloudflare Access with a one-time code sent to your email. Cloudflare processes your email address and issues a session cookie (CF_Authorization) so you stay signed in. Cloudflare also records sign-in events (such as time, IP address and result) in access logs available to us.
Payments (planned)
Paid plans are not available yet. When they launch, payments will be processed by Stripe as our payment processor. Stripe will collect your card and billing details directly. We will receive limited information such as your name, email, billing country, plan and payment status, but not your full card number.
Usage and technical data
Our hosting provider (Cloudflare) processes standard request data (IP address, user agent, pages requested, time) to deliver and secure the Service. We do not use third-party analytics or advertising trackers on this site.
Communications
If you email us, we keep the message and your contact details.
2. Why we use it
- To run the waitlist and tell you about launch and access.
- To send the weekly chart and product updates to waitlist members, which you can unsubscribe from at any time.
- To provide the Service: sign-in, subscriptions, billing and support.
- To secure the Service and prevent abuse, fraud and scraping.
- To meet legal, tax and accounting obligations.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
3. Who we share it with
- Cloudflare, Inc.: hosting, content delivery, security, the waitlist storage (Workers KV), bot checks (Turnstile) and sign-in (Access).
- Stripe, Inc. (when payments launch): payment processing.
- An email delivery provider, if we use one to send email.
- Professional advisers, and authorities when required by law or to protect our rights.
- A successor entity if our business is sold or reorganized.
These providers process data on our behalf under their own terms and privacy policies.
4. How long we keep it
- Waitlist entries: for as long as the waitlist and the Service operate, or until you ask us to delete them.
- Account and subscription records: for the life of your account and afterwards as needed for legal, tax and accounting purposes.
- Rate-limit counters: about 10 minutes.
- Sign-in logs: as retained by Cloudflare under our plan.
5. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain uses. We will verify requests and respond within the time required by law. You can unsubscribe from marketing emails at any time.
6. Cookies
We use only cookies needed to operate the Service, such as the Cloudflare Access sign-in cookie and security cookies set by Cloudflare (including for Turnstile bot checks).
7. Security
We use reasonable safeguards, including encrypted connections (HTTPS), access controls and email one-time-code sign-in. No method of transmission or storage is completely secure.
8. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their information.
9. International transfers
We and our providers may process information in the United States and other countries.
10. Aircraft data
The Service analyzes aircraft position broadcasts (ADS-B) and public aircraft registry records. We exclude aircraft whose owners have opted out of public tracking, and we do not use the Service to track individual people.
11. Changes
We may update this policy. If a change is material, we will notify you by email or on the site before it takes effect.