Privacy
Pilot version — updated 23 July 2026.
Who we are
Sillage is a personal digital pilot logbook, operated individually by its developer (reachable through your club or the contact address provided when joining the test). The service is in a pilot phase.
Data processed
Account: name, e-mail address, licence number (optional), password and signing PIN (stored only as hashes). Logbook: your flights and aircraft. Signatures: signer identity, fingerprint of the signed content, timestamp, and the handwritten trace where applicable. Validity dates (optional): the expiry dates you choose to track (rating, medical certificate, language…) — dates only, no documents, visible to you alone and deletable at any time; they only serve your reminders. Log: actions performed in the application (traceability required by the aviation context).
Instructor and examiner functions
Enabling these functions may involve a qualification check (licence shown, public authority list). The document is not kept: only the mention of the check (date and basis) is logged.
Purposes
Keeping your logbook, enabling signatures and their verification, ensuring integrity and traceability of records. No advertising, no resale, no profiling.
Hosting
Data hosted in the European Union (Scaleway, Paris region), encrypted connections, automated daily backups.
Who sees what
Your logbook is visible to you only. An organisation (club/ATO) you join sees your membership, never your logbook. Read access by an administrator or an inspector (authority) requires your explicit approval, is time-limited, and every consultation is logged. The ramp check is at your initiative: you generate a temporary code (24 h, revocable) and present it; whoever holds that code can view your logbook read-only — showing the code is consent, and every consultation is logged. Public verification pages expose a single signed entry, to whoever holds its token (QR). Your validity dates are visible to you alone.
Emails
Sillage only writes to you for what you asked for: address confirmation, password reset, invitations, and expiry reminders for your validity dates. Sent through Scaleway's European infrastructure (Transactional Email). No newsletter, no prospecting.
Your rights
Access, rectification and export: directly in the application (profile, PDF/CSV exports). Deletion: on request — entries countersigned by a third party are anonymised rather than erased, as the signature is also evidence for the signer. Withdrawal from the test at any time.
Pilot phase
The service is being run in: keep your paper logbook as the official document. A risk of data loss, although limited by backups, cannot be excluded.