Your CASVANT account.

VANGUARD stores the name and email you enter, a password hash when a password is used, session records, and request information used for account security and rate limiting. It does not store your password as readable text. Account verification is waiting for a connected email sender. Email sign-in codes and password-reset emails are disabled.

New guests sign up with their name and email, then receive a confirmation email with the VANGUARD app logo and a link. The link expires after fifteen minutes and works once; its token is stored hashed. Opening the page does not activate the account. Choosing Confirm email & create account verifies mailbox ownership before the account and guest membership are created. The link fragment is cleared from the address bar and retained in session storage on that browser until confirmation. After confirmation, guests choose a password for future sign-ins. Email is used only for account verification; sign-in codes, password-reset emails and marketing messages are disabled. New guest registration waits until email delivery is connected. Guest access is controlled by the owner. Invitations store a token hash, expiry, inviter and acceptance record; membership stores your account identifier and access status. The owner can see guest names and account emails, revoke access and remove the associated phone-alert registrations. The app login and installation pages are publicly reachable. Monitoring requires an active owner or guest account.

Saved reports, personal notes and display settings are stored on the browser or home-screen app where you create them, under your CASVANT account. They do not automatically sync to another device. Do not enter classified information or private client material into this pilot.

The dashboard retrieves public records from the sources listed under Sources & coverage. Opening an original source sends you to that provider, which has its own terms and privacy practices. Optional device location is requested only when you choose it. Contacts, microphone and camera access are not requested.

Location helps center your map and filter mapped reports by distance. Choose a city from the on-device GeoNames list, enter coordinates, or allow your phone’s location request. Remembering an area saves an approximate center, radius and settings under your CASVANT account on this device. The selected city’s time zone or your phone’s time-zone setting controls the local clock. You can choose a different zone manually. A saved device-location choice can refresh when you reopen the app and permission is already granted. The app does not continuously track location or request background GPS access. Clear the area in Choose area to remove the saved setting; change device permission through your phone or browser settings.

City searches run on your device and are not sent to a geocoding service. Your device fix is not uploaded to CASVANT by the location feature. If you separately opt in to Use this area for phone alerts, the approximate center, rounded to two decimal places, and selected radius are saved with that device’s push registration. The server then filters only reports with supplied coordinates. Those alerts use the last area saved while online; reopen after traveling to refresh it. Disable the area filter to remove its center from the active push registration when settings sync, or pause phone alerts to remove the registration. Reports without coordinates remain in Global and public agency lists. Detailed map tile requests reveal the area viewed to the map provider as described below.

Aircraft trails contain observed public positions saved in this browser or home-screen app. The map uses up to 60 minutes of recent history; cached records are refreshed and pruned when the map opens or updates. This preserves collected paths when you reopen the app. It does not supply a complete flight history. Published callsign routes, when available, do not confirm the current flight plan. Detailed maps load tiles directly from OpenFreeMap, and recent satellite imagery and fallback satellite tiles load from NASA GIBS. These providers receive your IP address and image or tile requests under their privacy practices. The reference day and night textures are served by VANGUARD. Current solar illumination is calculated in the browser; satellite data days and historical night lights are labeled separately. CASVANT does not send personal notes to the map provider.

The service stores a shared compressed snapshot of public-source reports and source health in its database. This contains public feed data, not your personal notes. When enabled, unattended checks update that snapshot hourly while the phone app is closed; the open dashboard continues to check every minute. This private app is free for the owner and invited guests and does not open paid checkout. Future App Store and Google Play purchases will be handled by the applicable store and require separate purchase and privacy disclosures before launch. Legacy billing identifiers, if present, are limited to customer/subscription references and status; VANGUARD does not store card numbers. The customer trial preview does not collect a card or begin billing. At a future customer launch, card details must be entered directly with the payment provider; planned billing reminders contain the selected plan, first-charge date and cancellation link. Account-verification email remains separate from billing reminders.

Coverage pop-ups use your selected coverage types and skip reports already seen. Optional phone notifications require your permission. When enabled, VANGUARD stores this device’s push subscription endpoint and encryption keys, your account identifier, selected categories and a bounded list of seen public-report identifiers. These records let the server send encrypted public-report alerts via your browser’s push service. You can pause phone alerts in Coverage notifications. Deleting your account also removes its registered push devices. Your phone may show alert text on its lock screen according to your notification settings.

Support requests store your account identifier, topic, message, reply and timestamps. They appear in your support inbox and an owner-only support workspace. The support form does not send email. Account emails are sent through the configured transactional provider (Mailjet for this verification-only setup). They contain a short-lived account-verification link. Name, recipient email and message content are sent to the provider for delivery. App verification messages do not subscribe you to marketing. Tokens are not included in public reports.

Your phone can pause the app in the background. Feed delays and failures are displayed; no source provides complete worldwide coverage. Optional NORAD / NORTHCOM notices concern public posts. Selected-coverage phone alerts follow the same hourly background-check rules; they are not official emergency warnings. Notice preferences and read history are stored under your CASVANT account on this device. Scanner links open Broadcastify, whose audio, availability and privacy practices are controlled by that provider.

Use Account → Delete my account to remove your account, active sessions, guest membership, support requests, registered push devices and this account’s saved records on the device where you delete it. Consumed invitation records remain consumed after deletion to prevent a link from being reused. Records on another device remain there until removed on that device. Security and hosting logs may remain for the hosting provider’s retention period. A payment provider or app store may retain any historical payment records under its own requirements. A commercial retention schedule and customer support contact must be finalized before paid launch.