Privacy Policy

CrewRated lets pilots share anonymous, moderated reviews of the Captains and First Officers they have flown with. CrewRated is currently open to pilots only, and only Captains and First Officers can be listed and reviewed. Flight attendant membership, profiles and reviews are switched off (see section 13).

Your account. To sign up you give an email address and a password, and you confirm the address through a link we email to you. We ask you to use a personal email address rather than a work address. Your password is handled by our account system (section 11); CrewRated never stores or sees it in readable form. We record when your account was created.

We do not ask for your name, phone number, employee number, badge photo or employment documents.

Your membership application. To join, you choose your airline, answer a short pilot questionnaire, and write a first review. Moderators see your answers while your application is open. Your answers are erased when the application is approved, rejected or withdrawn, or when your account is deleted. We keep a record that you applied (the date, airline, role and outcome) while your account exists, and we record whether and when your membership was approved.

Approval means a moderator has reviewed your questionnaire answers. It is not an independent check of your employment, and CrewRated does not verify employment. Reviews by approved members carry the label “Questionnaire Reviewed”.

Your reviews. A review has six scores from 1 to 5, a written review, and the crew member it is about. We record when you submitted it and when it was published; only the month of publication is ever shown. We keep a private record linking each review to your account (the “author link”); section 5 explains why.

Crew profiles you add. If you add someone to the directory, you give their first and last name, role and airline, and optionally their base airport. We record privately that your account added the profile, and when; this is used for daily limits.

Reports and requests. If you report a review, or ask for a profile to be corrected or removed, or report it as a duplicate, we store the reason and your explanation, linked privately to your account.

Counts used for limits. Daily limits on reviews, new profiles, reports and requests are worked out from what you have submitted. A review you withdraw still counts toward that day's limit for 24 hours.

Cookies and technical information. When you log in, a session cookie keeps you logged in. CrewRated uses no analytics, advertising or tracking cookies, and no analytics or advertising services. Our hosting and database providers (section 11) may automatically record technical information, such as IP addresses, as part of operating their services.

CrewRated publishes profiles of Captains and First Officers, who may not have signed up and may not know they are listed. A profile shows the person's name, role, airline, optional base, and number of approved reviews. Approved members can also read the reviews and scores about them.

If you are listed in the directory, you can ask for your profile to be corrected or removed, or report that it is a duplicate, using “Request a correction or removal” on the profile page. You only need a free account with a confirmed email; you do not need to be a member. A moderator reviews every request; the moderation screens do not show who sent it.

• Corrections: a moderator can correct the name, role or base shown on a profile.
• Removal: a removed profile, and the reviews about it, are no longer shown to anyone. We keep the profile record privately so the same person cannot simply be added again, and a moderator can restore the profile later.
• Duplicates: if one person has two profiles, a moderator can merge them into one (section 7).

Requests are kept as described in section 10. Profile pages ask search engines not to index them.

The people who operate CrewRated's database can technically connect a review to the account that wrote it, or the private records described in sections 5 and 9. This access is limited to people authorized by CrewRated LLC and is used only where technically necessary to operate, secure and legally protect the service.

Your name and email address are not displayed with your reviews. The identity of a review's writer is not shown to visitors, to members, or in CrewRated's moderation screens. Only the month a review was published is shown, not the exact date.

CrewRated keeps a limited private link between each review and the account that wrote it, where this is necessary to:

• allow only one review per member per crew member, including after a review is taken down or an account is deleted (section 9);
• moderate reviews, for example so that moderators cannot decide reports about their own reviews;
• show you your own reviews and apply daily limits;
• keep accounts and the service secure; and
• meet legal obligations.

CrewRated does not sell reviewer identities or any other personal information.

Anonymity is not absolute. Details you choose to include in a review, such as a specific trip or a small crew base, can sometimes identify you. The people who operate the database can technically see the author link, and we may be required to disclose information in response to a valid legal request, such as a subpoena or court order. Write reviews as if the person might work out who you are.

We use the information described above only to:

• run your account and send account emails, such as email confirmations and password resets;
• review membership applications;
• moderate reviews, profiles, reports and requests;
• prevent duplicate reviews, repeat reviews after an account is deleted, and abuse;
• keep the service secure; and
• comply with legal obligations.

CrewRated does not sell personal information and does not use it for advertising. If we introduce any new use of personal information, we will update this Privacy Policy before that use begins.

• Every review, new profile and membership application is checked by a moderator before anything is published. If a review is rejected, you see “Rejected” in My reviews for 30 days.
• Moderators act on reports and requests; the moderation screens do not show who sent them.
• Moderators can correct a profile's details, take a profile or review down, restore a profile, and suspend or end a membership. A review that is taken down is hidden immediately. A moderator can restore it during the following 30 days; after that it is permanently deleted and can no longer be restored. They can add private notes to an internal moderation log. The moderation screens do not show who wrote a review.
• When two different people share a name, a moderator approves the second profile, which is shown with a number, such as “(2)”.
• When one person has two profiles, a moderator can merge them. Reviews move to the remaining profile and stay anonymous, and the old profile's address forwards there. If you reviewed both profiles, one of your reviews is kept and shown; the other is kept but hidden, or rejected if it was still waiting. We keep a record of each merge, including the reviews' original profiles, but not who wrote them.

You can change your email address on your Account page; the change takes effect once you confirm the new address. When it changes, we keep a coded fingerprint of your previous address (described in section 9) linked to your account. This stops someone from changing their email, deleting their account and signing up again with the old address to review the same people again. These fingerprints are deleted with your account and then become part of the deletion record described in section 9.

You can delete your account yourself, at any time, from your Account page. You confirm with your password and by typing DELETE. Deletion is permanent: the account cannot be restored. (An account with moderator access must have that access removed first.)

When your account is deleted:

• Removed: your account, email address, membership record, application records and questionnaire answers, and the links between your account and your reviews, reports and requests. Entries in the moderation log about your account no longer identify the account.
• Withdrawn: reviews and new profiles still waiting for moderation; they never become public because of the deletion. A membership application that is still open is closed, and its first review is rejected.
• Kept: reviews that were already published stay published, but are no longer linked to any account, and stay anonymous on the site. Reports and requests you sent are kept for their normal retention period (section 10), no longer linked to you.
• Logged: an entry noting that an account was deleted, with counts only and no identifying details.

The deletion record. So that a deleted account can't be used to get around the one-review-per-crew-member rule, we keep a small private record:

• a coded fingerprint of your email address, and of any earlier email addresses on the account. It is made with a keyed one-way function (HMAC-SHA256) and a secret key, ignoring capital letters, “+” tags and, for Gmail addresses, dots. It cannot be turned back into your email address, although CrewRated can check whether a particular email address matches it; and
• the list of crew profiles you had a published review of, including reviews that were later taken down.

It does not contain your email address, your reviews, or anything shown on the site.

If someone later signs up with the same email address, the record is used only to:

• stop them from reviewing those same crew members again (they see the normal “You have already reviewed this crew member” message); and
• show moderators a yes-or-no note, “Returning after a deleted account”, on their membership application.

The deletion record is kept for 2 years after the account is deleted. After that it is no longer used, and it is deleted by our regular cleanup process (section 10).

Records that reach the end of their retention period are deleted by a regular automated cleanup process, so they may remain for a short time after the period ends before they are removed. Expired deletion records and taken-down reviews past their 30 days are no longer used or restorable in the meantime. Deleted information may also remain in routine backups for a limited period, until those backups expire.

• Supabase provides CrewRated's database and account system, and sends account emails, such as email confirmations and password resets, through its built-in email service. CrewRated's data is stored in Supabase's US West (Oregon) region.
• Vercel hosts the CrewRated website.
• The site's fonts are bundled with the website; your browser does not contact a font service to load them.

CrewRated does not use analytics, advertising or social-media services.

Access to information is controlled inside the database itself. Visitors and members can reach only the information described in section 4. Moderators work through admin-only screens that do not show who wrote a review or sent a report. Questionnaire answers, author links and deletion records are kept in parts of the database that the website cannot read directly.

No system is perfectly secure, and we cannot guarantee that information will never be accessed without permission. If a security incident affects your personal information, we will notify you as required by applicable law.

CrewRated is currently open to pilots only. Only Captains and First Officers can be added to the directory and reviewed. Flight attendant membership, profiles and reviews are switched off; any flight attendant information already stored is kept, but hidden from visitors and members. If we open CrewRated to flight attendants, we will update this policy first.

You must be at least 18 years old to use CrewRated.

• See your reviews and their status in My reviews, and withdraw a review that is still waiting for moderation.
• Change your email address and password on your Account page.
• Ask for a profile to be corrected or removed, report it as a duplicate, or report a review.
• Delete your account (section 9).
• Request a copy of your personal information by emailing privacy@crewrated.app. Requests are handled by hand. Depending on where you live, you may have other rights under privacy law; contact us at the same address to use them.

If we change this policy, we will post the updated version here with a new effective date. For significant changes, we will also notify registered members by email when appropriate.

CrewRated LLC
Delaware, USA
privacy@crewrated.app