Who is responsible
N6YYO Remote Base is made by Circuit Coders (“we”, “us”), which decides how the personal information described here is used and is responsible for it (the data controller). Questions or requests go through support.
What stays on your station
Your radio audio, your transmissions, your logbook and your station’s settings live on your station PC. When you operate remotely, audio and control travel between your device and your station over an encrypted connection; we don’t record them. Contacts leave your station only when you upload them to a QSL service you set up yourself (such as QRZ.com, LoTW, Club Log or eQSL), under that service’s own privacy policy.
What we collect
- Station check-ins. About every 6 hours (hourly while remote access is off; when a check-in gets no answer, it tries again after 5 minutes, then 10, then 20 and so on, never more than 6 hours apart), your station sends us, over HTTPS: its software version, the radios it is set up with (maker, model, how each connects, and which one is active, never a serial number, address or port), and whether it is transmitting at that moment (used for that check-in only, not stored). It signs in with its station key. We keep only a one-way hash of the key, with the callsign, key ID and issue date the key carries. We answer with a signed license file that your station keeps. The first check-in, or the first time the station registers its internet address, creates your station’s record and starts its trial. The station does not send its logbook, its settings or its audio. We use the check-in to keep your license and remote access correct and to offer the right updates.
- Station address checks. When your station registers its internet address with our station site (cascade-remote.vercel.app), that site forwards the station key to us over HTTPS to ask whether remote access is allowed. We use it only to answer that question.
- Your account. Your email address, the callsigns of your stations, and the stations, licenses and purchases linked to them. You sign in with a one-time code we email you; there is no password to set or remember.
- Purchases. Stripe processes payments. We receive the purchase, the amount and your billing country, never your full card number.
- Support requests. Your name, email, callsign (if you give it) and message, so we can answer. The message is also emailed to us so we see it quickly.
- Abuse protection. To stop automated sign-up and support spam we count requests per IP address and per email for up to an hour. We keep only a one-way fingerprint (a hash) of the address or email, never the address itself, and delete the counts within two days.
- Website. Our hosting provider keeps standard request logs (such as IP address and browser) for security and reliability. The only cookies are the sign-in cookies set by our account service when you sign in; they are needed for the account page to work. This site sets no advertising, analytics or tracking cookies.
Who we share it with
Only the services that run N6YYO Remote Base for us, each of which processes data only to provide its service:
- Vercel hosts this website and its servers (United States).
- Supabase runs our database and the sign-in service (United States).
- Resend sends our emails: sign-in codes, trial reminders and support notifications.
- Stripe processes payments.
- Cloudflare provides your station’s secure internet address and the encrypted tunnel to it.
- callook.info: when you add a station, its callsign is checked against this public lookup of FCC license records. Only the callsign is sent.
If you install an app from the Apple App Store or Google Play, the store handles that download and its own data under its policy. We don’t sell or rent personal information, and we don’t share it for advertising.
How long we keep it
Account, station and purchase records are kept while you have an account, and purchase records as long as tax law requires. Support requests are kept for up to two years after they are closed.
Your choices
You can ask us for a copy of your data, to correct it, or to delete your account, through support. California residents have these rights under the CCPA, and we extend them to everyone. Deleting your account ends remote access for your stations.
Children
N6YYO Remote Base is not directed to children under 13, and we don’t knowingly collect their information.
Changes
If this policy changes in a way that matters, we will say so here and email account holders before it takes effect.