Privacy Policy

Last updated: 5 August 2026

TFR Browser is designed to collect as little as possible. There are no accounts, no analytics, no advertising, and no tracking. This policy covers both the iOS app and the web version.

What is collected

To deliver notifications, TFR Browser sends two things to its server:

• A push subscription. On iOS this is a device token issued by Apple. On the web it is a subscription issued by your browser's push service, which includes a delivery address and two encryption keys. Either way it identifies a device or browser to a notification service, not a person. It changes if you reinstall the app, clear your browser data, or switch browsers.
• The states you select and your chosen time window. So the server knows which restrictions are relevant to you.

That's all. Specifically, TFR Browser does not collect your name, email address, phone number, precise or approximate location, contacts, photos, device identifiers for advertising, or any usage analytics.

TFR Browser never requests location access.

The web version stores your selected states, your time window, and the fact that you acknowledged the safety disclaimer in your own browser's local storage. That is on your device, not on the server. It uses no cookies and no third-party scripts.

What it is used for

Solely to send you notifications about newly published Temporary Flight Restrictions in the states you selected. It is not used for any other purpose, and it is not shared, sold, or provided to advertisers or data brokers.

Where it is stored

Push subscriptions and state preferences are stored on Cloudflare Workers KV. Records expire automatically after 90 days without contact, and are deleted immediately if the notification service reports that the app has been uninstalled or the subscription has lapsed.

Turning it off

Switching off notifications in Settings removes your device record from the server entirely.

• iOS: deleting the app has the same effect. Your token becomes invalid, Apple reports this, and the record is removed.
• Web: revoking notification permission in your browser, or clearing site data, invalidates the subscription. The push service reports this on the next send and the record is removed.

Third parties

• Cloudflare hosts the server that polls the FAA, stores subscriptions, and sends notifications.
• Apple operates the Push Notification service that delivers alerts to the iOS app.
• Your browser's push service delivers alerts to the web version. Which company this is depends on the browser you use — Google for Chrome and most Chromium browsers, Mozilla for Firefox, Microsoft for Edge. TFR Browser does not choose it and cannot change it; it is part of how web notifications work.
• OpenStreetMap provides the map tiles shown behind a restriction's boundary in the web version. This happens only when you open a specific restriction's detail view — never on the main list, and never in the background. OpenStreetMap's servers receive your IP address and the map area being displayed, which is how any online map works. No identifier from this app is sent with those requests, and the mapping software itself is served from our own site rather than a third party.

All of these act as infrastructure providers.

One point worth being plain about: the contents of every web notification are encrypted before they leave our server, using keys that only your browser holds, so the push service cannot read what a notification says. It can see that a message was sent to your subscription and when. This is inherent to the Web Push standard rather than a choice made here.

TFR data comes from the Federal Aviation Administration's public TFR feed. The FAA receives no information about you — the server reads that feed on behalf of all users collectively, not per person.

Children

TFR Browser is intended for drone and aircraft operators. It is not directed at children and collects nothing that could identify a child.

Changes

Any material change to this policy will be reflected in an app update and on the website, and the date at the top will change.

Who is responsible

TFR Browser is built and operated by Eric Thurber, an individual, based in the United States. There is no company behind it. He is the data controller for the small amount of information described above, and decides how it is used — which is to say, only to deliver the notifications you asked for.

Contact

Questions about this policy, or requests to delete your data: eric.n.thurber@gmail.com

You can delete everything yourself at any time by switching off notifications in Settings, which removes your record from the server immediately. No request is needed.