DroneZone
Privacy policy
Effective 12 October 2026. Questions: [email protected]
Who we are
DroneZone is an independent intelligence desk covering unmanned systems, counter-UAS, electronic warfare, night vision, and drone munitions, published at dronezone.news. For the purposes of the GDPR, the desk is the data controller for the personal data described here.
What we collect and why
Account data
Email address and a salted, one-way hash of your password — never the password itself — plus the preferences you set (followed verticals, saved systems, digest toggle). Legal basis: performance of the service you signed up for (GDPR Art. 6(1)(b)). Kept while your account exists; deleted within 30 days of an erasure request.
Newsletter and digest email
The email address you subscribe with, confirmed by double opt-in. Legal basis: consent (Art. 6(1)(a)), withdrawable any time via the one-click unsubscribe link in every email — no login required. Removed within 30 days of unsubscribing.
Analytics
Self-hosted Umami: aggregate, cookie-less page-view statistics. No cookies, no IP storage, no cross-site tracking, no personal data. Legal basis: legitimate interest (Art. 6(1)(f)) in knowing which stories land.
Server logs
Standard web-server logs (IP address, user agent, requested URL) used only for security, abuse prevention, and debugging. Legal basis: legitimate interest (Art. 6(1)(f)). Rotated and deleted after 30 days.
What we never do
- We never sell, rent, or trade personal data — to anyone, for any price.
- No advertising trackers, no third-party analytics pixels, no fingerprinting.
- No sharing of personal data except with the processors listed below, under contract, solely to run the service.
Processors
The service runs with a deliberately short processor list:
Infrastructure hosting
Virtual private server running the site, database, and analytics (EU region).
Resend
Transactional email delivery (verification links, confirmation codes, the weekly digest). Receives your email address only.
Your rights
You can access, correct, export, or erase your personal data, and object to or restrict its processing, at any time. Email [email protected] from the address on your account — we answer within 30 days (the GDPR statutory deadline) and complete verified erasure requests within the same window. Unsubscribing from any email takes one click and needs no login.
Security
TLS everywhere, passwords stored as salted hashes, least-privilege database roles, and admin surfaces closed to the public internet. If a breach ever risks your data, we notify the supervisory authority within 72 hours where the GDPR requires it, and affected readers directly where the risk is high.
Changes
If this policy changes, the effective date above moves and significant changes are announced in the weekly brief before they take effect.