Privacy notice

RFscape collects as little as possible. You can use the tool without an account; an account stores only what is listed below. Last updated 05/11/2026.

Who is responsible

The data controller is Emanuele, IW9GDC, Messina, Italy. Contact: [email protected].

Using the tool without an account

The calculations run in your browser: your stations, antennas and settings are not sent to us. They are kept in the address of the page (after the # sign), which stays on your computer unless you share the link. Antenna pattern files you load and a few display choices are kept in the local storage of your browser.

To compute, the browser downloads terrain tiles from dem.rfscape.com and map tiles from the OpenStreetMap servers. Like any web request these reveal your IP address and the area you are looking at. We do not keep logs of the terrain requests on our server; Cloudflare, which delivers the site, keeps technical logs for security. The OpenStreetMap Foundation applies its own privacy policy to the map tiles.

What an account stores

• your email address and the username you choose;
• your password, never in clear: only a salted and peppered hash (PBKDF2-SHA-256) from which the password cannot be read back;
• the date of registration, the date you accepted this notice, the date you confirmed your address and the date of your last sign-in;
• until you confirm it, a confirmation token valid for 24 hours; accounts never confirmed are deleted after 48 hours;
• while you are signed in, a session record with its start and expiry date.

We do not store your IP address with the account, and we do not use the data for advertising or profiling.

Why, and on what legal basis

To create and run your account and to let you sign in: performance of the service you ask for (Article 6(1)(b) GDPR). To protect the sign-up and sign-in forms from automated abuse with Cloudflare Turnstile: our legitimate interest (Article 6(1)(f) GDPR). We may write to you about your account or important changes to the service; we will not send newsletters unless you ask for them.

Cookies

• rfs_session: set only when you sign in, strictly necessary to keep you signed in, expires after 30 days or when you sign out;
• iw_lang: set only if you choose a language with the IT | EN switch, remembers that choice for one year.

There are no analytics, advertising or tracking cookies. Cloudflare Turnstile may set a technical cookie of its own while it runs the anti-bot check.

Who processes the data for us

Cloudflare, Inc. hosts the site (Cloudflare Pages), runs the account functions and keeps the account database (Cloudflare D1, created in the European Union jurisdiction), and provides the anti-bot check (Turnstile). Cloudflare acts as our processor under its data processing addendum; where data leaves the European Economic Area it relies on the EU-US Data Privacy Framework and the standard contractual clauses. Resend, Inc. delivers the email that confirms your address (your email address, your username and the confirmation link pass through it), under its data processing agreement and the standard contractual clauses.

How long

Account data is kept until you delete the account. Sessions are deleted when they expire or when you sign out. To delete your account, write to the address above from the email you registered with: we delete it within 30 days, usually much sooner.

Your rights

You can ask for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to the processing based on legitimate interest (Articles 15-21 GDPR). Write to the address above. You also have the right to lodge a complaint with a supervisory authority; in Italy it is the Garante per la protezione dei dati personali (garanteprivacy.it).

Age

Accounts are meant for people aged 16 or over.