About This Policy
NCO Logger is operated by the West Valley Amateur Radio Club (WVARC). This policy describes the information handled by the current NCO Logger deployment and the choices available to its users.
1. Information We Collect
Information associated with an NCO Logger account can include:
- Email address, Name, Callsign, and Location.
- An internal user ID and account creation or update dates.
- Authentication method and provider identifier, login information, and last-login date.
- A profile or avatar URL.
- Account preferences, consent and deletion status, and other account-status information.
- Favorite or followed nets and owned net profiles.
NCO Logger does not store a Google password or an email-account password for Google or magic-link sign-in.
2. How We Use Information
We use information to:
- Create and authenticate accounts and maintain signed-in sessions.
- Identify amateur radio operators and display station information during nets.
- Operate live nets, chat, favorites, saved net profiles, and net-management features.
- Send requested sign-in links, net notifications, and net-close reports.
- Protect and administer the service, investigate problems, and perform account or session cleanup.
NCO Logger does not currently use advertising or analytics tracking.
3. Amateur Radio and Net Participation Information
Saved Net Profiles
Saved profiles can contain a net title, frequency, mode, mode details, Welcome notes, owners, followers or favorites, and net settings.
Live Net Operations
During a live net, operational information can include:
- Callsign, Name, Location, and profile or photo reference.
- Check-in and check-out information and timestamps.
- Net role, hand state, operational statuses or tags, and signal reports.
- Other station, ordering, and session information needed to operate and display the live net.
Live station and session records are normally deleted when the net closes. Participation information included in emailed reports is not removed from recipients' email accounts by that cleanup.
4. Live Net Chat
- Public chat is visible to authenticated participants in the current live net.
- Direct or private chat is visible only to its sender and recipient.
- Uploaded images follow the visibility of their associated public or direct message.
- Public, non-deleted chat may be included in the plain-text net-close report.
- Direct or private messages are not included in that report.
Users can delete their own messages. An NCO can clear public chat, but that action does not remove private conversations. Deleting or clearing a message removes its associated uploaded image during normal operation.
Chat records and remaining associated uploads are normally removed during net-close cleanup. An abnormal failure may delay or prevent part of that cleanup.
5. Authentication and Sessions
Google OAuth
Google sign-in may provide NCO Logger with an email address, Google profile identifier, display name, and profile-photo URL.
Email Magic Links
Email magic-link authentication uses the email address supplied by the user. NCO Logger may use Gravatar to obtain a profile image associated with that address.
Essential Session Cookie
NCO Logger uses an essential signed session cookie for authentication. Its maximum age is approximately 3.5 days and it may renew with account activity. It is not an advertising or analytics cookie.
6. Email Notifications and Net Reports
- Followers with Email Notifications enabled may receive a notification when a followed net starts.
- Net owners and configured administrative recipients with Email Notifications enabled may receive net-close reports.
- A close report may include a CSV attendee report and a plain-text log of public chat.
- Direct or private chat is excluded from the net-close chat log.
- Authentication magic-link email is necessary for email-based sign-in and is not controlled by Email Notifications.
Close reports are generated for email delivery. NCO Logger does not maintain an application-side archive of those report files.
7. Third-Party Services
The current deployment uses or may load the following services:
- Google OAuth for account authentication.
- Gmail SMTP for email delivery.
- QRZ.com for amateur radio callsign lookup.
- Gravatar for profile images associated with email sign-in.
- Google profile-photo services for Google account images.
- Google Fonts for page fonts.
Azure Maps support exists in the application, but geocoding is currently disabled on this deployment. The application database and chat-upload storage are self-hosted within the deployment stack.
Third-party services may process information needed to provide their respective functions according to their own privacy practices.
8. Data Retention
- Account and profile information is retained while the account remains active, subject to the inactivity process described below.
- Saved net profiles remain until removed by their owner or owners, subject to account cleanup.
- Favorites remain until unfavorited, the associated profile is deleted, or account cleanup removes the relationship.
- Live sessions and station interactions are normally deleted when the net closes.
- Chat records and chat uploads are normally removed during net-close cleanup.
- Close reports are generated for email delivery and are not archived by the application.
- The authentication session cookie has an approximately 3.5-day maximum age and may renew during activity.
- QRZ lookup cache records expire after approximately seven days.
- Some internal callsign-registration or station-override records do not currently have a fixed retention period.
No fixed backup-retention period is stated because backup-retention behavior has not been established.
9. Account Deletion
Inactivity
Accounts are not automatically deleted merely for ordinary short-term inactivity. After 3 years without a login, NCO Logger sends an inactivity warning email. The account remains intact for another 30 days.
Signing in during that 30-day period cancels the inactivity deletion process. If the account remains unused after the warning period, it may enter the account deletion process.
Deletion Requested by You
You can request deletion through Data Privacy → Delete My Account. When available, Undelete can cancel the request before processing. NCO Logger does not guarantee a specific restoration period.
When deletion is processed, the user profile is deleted, favorite relationships are cleaned up, and ownership is removed from owned net profiles. A profile remains if another owner remains; a profile may be deleted if the deleting user is its sole owner.
Account deletion does not claim to immediately erase every possible internal record, backup, third-party record, or report already delivered to an email recipient.
10. Your Privacy Choices
Current user-facing controls include:
- Email Notifications for applicable net notifications and reports.
- Live Net Chat to show or hide the interactive chat interface.
- Favorite and unfavorite controls.
- Delete My Account and, when available, Undelete.
- Ignore or unignore individual private-chat users.
- Delete your own chat messages.
11. Information Visibility and Sharing
- Callsign, operational Name, Location, photo, role, status, and participation information may be visible to people viewing a live net as appropriate to the application.
- Public chat is visible to authenticated participants in the live net.
- Direct messages are restricted to their sender and recipient.
- Net participation information may appear in reports sent to net owners and configured administrative recipients.
- Callsigns may be sent to QRZ.com for lookup.
- Authentication, email, font, and profile-image providers receive information needed to provide their respective services.
12. Changes to This Policy
This policy may be updated when NCO Logger's features, services, or information practices materially change. The current Effective Date and Last Updated date appear at the top of this page.
13. Contact Us
For privacy questions or account concerns, use Contact NCO Logger.