Last updated: 4 November 2026
Aviaedge is published by the Ukrainian non-profit public organization AVIAEDGE, which is the controller of the personal data described here. This page explains what we collect when you read the site, subscribe to the newsletter, or sign in as a member, and what you can do about it.
We keep data collection small on purpose. We do not sell personal data, we do not build reader profiles of our own, and we do not make automated decisions about you. If you accept analytics, Google also receives advertising signals, which the next section explains.
Google Analytics 4
Where a measurement ID is configured, the Google Analytics script loads on every page, including before you answer the consent banner. Until you accept, it runs in Google Consent Mode v2 with analytics storage, advertising storage, advertising user data, and ad personalization all set to denied, and with IP anonymization switched on. In that state Google does not write analytics or advertising cookies in your browser, but it does receive a request that counts the page view and that necessarily carries your IP address and browser details.
If you accept, those signals switch to granted, the two advertising ones included: Google may then set cookies in your browser, measure your visits across pages and sessions, and use what it collects for advertising and ad personalization. If you decline, the script stays in the denied state. Google processes this data as our analytics provider.
Microsoft Clarity
Clarity produces heatmaps and session recordings that show how pages are used. It is gated on consent: the script is not loaded at all until you accept. If you decline or ignore the banner, Clarity never runs.
Umami
Umami is our own analytics server. We host it ourselves and serve it from our own domain, so no request goes to an outside analytics company. It loads on every page and is not gated on the consent banner.
It is configured to work without cookies and without collecting personal data: it counts page views, referrers, screen sizes, and an approximate location derived from the request. As with any web request, our server receives your IP address and browser details in order to answer it; Umami is designed to turn those into an anonymous visit identifier rather than to store them. Nothing is stored on your device for Umami.
Cookies we set
We set three cookies, all first-party. aviaedge-analytics-consent records your answer to the consent banner as granted or denied and lasts one year. ae_member keeps you signed in for 30 days after you use a sign-in link; it holds nothing but a signed reference to your account and an expiry, and scripts in the page cannot read it. theme remembers whether you chose the light or the dark design and lasts one year.
None of them carries tracking data. Clearing the consent cookie brings the banner back.
Newsletter
If you subscribe, we store the email address you give us, the language you subscribed in, and how often you want to hear from us. Subscription is double opt-in: we send a confirmation link, and nothing is delivered until you follow it. Once a subscription is confirmed, the newsroom gets an internal Telegram message carrying those same three details.
Every email carries an unsubscribe link. Unsubscribing stops delivery at once, and we then mark the record as unsubscribed and keep it, so that a later import cannot add you back by mistake. If you would rather we erased it, ask us and we will.
Member accounts
Signing in to Aviaedge is passwordless. You enter an email address, we email you a single-use sign-in link, and we store a member record holding that address, your language preference, and your membership level. There is no password to lose.
Following the link sets the ae_member cookie described above. We keep no server-side log of your sign-ins: the signed cookie is by itself the proof that you are signed in. Ask us and we will delete the account.
Cloudflare Turnstile and form security
We use Cloudflare Turnstile to protect newsletter and member sign-in forms against automated abuse. The check runs when a protected form loads, independently of analytics consent. It normally works in the background and only shows a challenge when interaction is needed. Our server validates the resulting token before accepting the request.
Cloudflare processes technical signals, including your IP address, browser and connection information, and the site on which the check runs. It uses these signals to detect bots and to improve Turnstile. See the Cloudflare Turnstile Privacy Addendum for details.
Cloudflare Turnstile Privacy Addendum
Other service providers
Four companies handle data on our behalf. Google provides the analytics described above. Microsoft provides Clarity, and only once you have accepted. Resend delivers our email, so it handles the address on every newsletter and every sign-in message. Telegram carries the internal message that tells the newsroom a subscription was confirmed.
All four sit outside Ukraine and the EU, so these are international transfers. Umami is absent from that list: we host it ourselves, and its data never leaves our server.
How long we keep data
Member records are kept until you ask us to delete them. A newsletter record survives unsubscribing, marked as unsubscribed, until you ask us to erase it. Analytics data is kept for the retention period configured in each tool, and is not linked back to your subscription or your account.
Your rights
Under the GDPR and Ukrainian data protection law you can ask us for a copy of your data, have it corrected or deleted, restrict or object to how we use it, and receive it in a portable form. You can also complain to a data protection authority in your country.
You withdraw analytics consent by clearing the aviaedge-analytics-consent cookie, which brings the banner back so you can answer again. The banner itself only appears while you have not answered yet, so once you have chosen, clearing that cookie is the way to change your mind.
Changes to this policy
If we add a tool or change how data is handled, we update this page and the date shown above.
Data controller
- Legal name: Public Organization "AVIAEDGE"
- EDRPOU code: 46123282
- Registered address: 21 Oleksandra Bohomoltsia St, Uzhhorod, 88015, Zakarpattia Oblast, Ukraine
- Email: vh@aviaedge.com
Contact
For any question about this policy or about your data, write to us. We answer in Ukrainian, German, or English.