Privacy.

Last updated: 29 August 2026

Leading Edge is a wingsuit community platform — articles, guides, a podcast, coach profiles, events and a members' area. This notice explains what personal information we hold, why we hold it, how long we keep it and what you can ask us to do about it.

We run no analytics, no advertising and no tracking of any kind, and we never sell or share your information for marketing.

Who we are

Leading Edge ("we", "us") operates leadingedge.ws and is the data controller for the information described below.

For anything to do with privacy — a question, a request, a complaint, or a photo you want taken down — email team@leadingedge.ws.

We handle personal information in line with the UK GDPR and the Data Protection Act 2018, and with the EU GDPR where we serve people in the European Economic Area.

The short version

• No analytics, no advertising, no tracking cookies, no profiling.
• The only cookies we set are the ones that keep you signed in and keep forms safe.
• We never sell, rent or trade your information, and we never share it for anyone else's marketing.
• The newsletter is double opt-in: nothing is sent until you confirm, and every issue carries a one-click unsubscribe.
• Photos and videos uploaded to an event hub are permanently deleted 30 days after the event ends.
• You can ask to see, correct or delete anything we hold, at any time.

When you browse the site

Our hosting platform records ordinary server logs: your IP address, the page requested, your browser's user-agent string and the time. We use them to keep the site up, diagnose faults and stop abuse — sign-in attempts and form submissions are rate-limited per IP address, which is what that information is for. It is never used to build a profile of you.

We also log the address of any page that comes back "not found", along with the referring page and browser type, so we can repair broken links left over from the old site. That log holds no IP addresses.

We keep one other number: a simple daily count of how many pages were viewed across the site as a whole — a single total per day. It contains nothing about you: no IP address, no browser details, not even which page was viewed. It exists only so we can see whether the site is growing.

When you subscribe to the newsletter

We store your email address, the part of the site you signed up from, the times you subscribed and confirmed, and a random token that makes your confirmation and unsubscribe links work.

Signing up is double opt-in — we send one confirmation email and nothing further unless you click the link in it. Every issue after that carries an unsubscribe link, and unsubscribing takes effect immediately and needs no account.

The signup form deliberately gives the same response whether or not an address is already on the list, so nobody can use it to work out whether you are subscribed.

When you contact a coach or an event organiser

The enquiry forms on coach profiles and event pages collect your name, email address, an optional phone number or social handle, your topic and your message.

That message is emailed straight to the coach or organiser. We take the destination address from their own profile on our side — whoever fills in the form can never choose who it emails — and we keep no copy of the enquiry in our database. Our server log records only that an enquiry was sent and which profile it went to. Once your message is in their inbox, what happens next is between you and them.

When you have a member account

We store your name, email address, a securely hashed version of your password (never the password itself), whether you have verified your email, your roles and permissions, your notification preferences and your progress through the onboarding checklist.

If you choose to sign in with Google, Microsoft or Apple, that provider gives us your name, verified email address and a unique identifier for your account with it. Apple may provide your name and email address only the first time you sign in; the unique identifier lets us recognise your account on future visits. We store the provider and that identifier with your member account so we can sign you in and link the same provider account on future visits. We do not receive or store your Google, Microsoft or Apple password, posts, contacts or other account content. You can disconnect a provider from Settings at any time; this removes its link to your Leading Edge account, which you can still access with email and password.

If you register and never verify your email address, the account is deleted automatically after 30 days.

If you're a coach, or you appear on the site

Coach profiles are public by design. They show your name, photo, biography, location, disciplines and coaching rating, so that people can find you and get in touch. You edit your own profile from your account, and you can ask us to unpublish it at any time.

Badge profiles are short public pages reached by a QR link, created by coaches and organisers to record a flyer's progression. They hold a name, an optional email address, a photo, a home drop zone and the badges awarded.

Photos in the community gallery on our homepage are contributed by coaches; we store the image and the name of whoever uploaded it.

If you appear anywhere on this site and would rather not, email us and we will take it down.

Event participant hubs

An organiser can create a page for an event, reached by a private link and a shared access code. It holds the event details, an optional briefing video from the organiser, and the photos and videos participants upload — together with the name typed alongside an upload and basic file information such as name, size and format.

Those files sit in private storage with no public address. They can only be viewed through short-lived links generated for people who have the code.

The whole page — media, names and all — is permanently deleted 30 days after the event ends. An organiser can extend or reset that countdown while the event is still running, and can delete the page sooner.

Please don't upload footage of someone who wouldn't want it there. If a photo or video of you has been posted, email us and we will remove it straight away rather than leaving you to wait out the countdown.

Why we're allowed to hold this

• Contract — running your member account and providing what you signed up for.
• Consent — the newsletter. You can withdraw it at any time through the unsubscribe link or by emailing us, without affecting anything sent beforehand.
• Legitimate interests — keeping the site secure and available, preventing spam and abuse, passing an enquiry to the coach or organiser you chose to contact, and publishing the site itself. We have weighed these against your rights and do not consider them to override them.
• Legal obligation — where the law requires us to keep or disclose something.

Cookies and browser storage

We use only what is strictly necessary, which is why there is no cookie banner — there is nothing optional to consent to:

• a session cookie, which keeps you signed in and preserves what you have typed into a form;
• a security token cookie, which stops other websites submitting forms as you;
• a "remember me" cookie, set only if you tick that box when signing in;
• le_theme, which is held in your browser's local storage rather than a cookie and remembers whether you prefer the light or dark theme. It never leaves your device.

We set no analytics, advertising or cross-site tracking cookies at all. Clearing your cookies signs you out.

Who else handles your information

We keep the list of suppliers short. Each acts as our processor, under contract, and only on our instructions:

• Ploi Cloud — hosting for the application and its database.
• Cloudflare R2 — storage for event media and members' files.
• SMTP2GO — delivery of our email, including confirmations, password resets, enquiries and the newsletter.
• YouTube (Google) — the videos embedded around the site. We embed them through youtube-nocookie.com, which stops YouTube setting cookies until you actually press play. Once you do, Google receives your IP address and its own privacy policy applies.

When you choose Google, Microsoft or Apple sign-in, the provider handles that sign-in under its own privacy policy and knows that you have used its service to access Leading Edge. Google, Microsoft and Apple act as independent controllers for that sign-in, rather than processors acting only on our instructions.

Podcast episode details reach us from our own YouTube channel feed and our podcast host's RSS feed; no information about you travels the other way. Links to Spotify, Apple Podcasts, Instagram, Facebook and elsewhere are ordinary links — follow one and that site's privacy policy applies, not ours.

Some of these suppliers may store or process information outside the UK and the European Economic Area. Where they do, the transfer is covered by the UK's international data transfer agreement or the EU's standard contractual clauses.

How long we keep things

• Member accounts and connected sign-ins — for as long as the account is open, and deleted when you ask. A connected Google, Microsoft or Apple sign-in is deleted sooner if you disconnect it in Settings. Accounts that are never verified are deleted after 30 days.
• Newsletter subscriptions — until you unsubscribe. We keep a record that you unsubscribed so you are not added back by mistake; ask and we will erase that too.
• Event hub pages and their uploads — 30 days after the event ends, then permanently deleted.
• Enquiries — we don't keep them at all; they live in the recipient's mailbox.
• Server logs — a short rolling window of roughly a fortnight, cleared again whenever the site is redeployed. The broken-link log keeps 30 days.
• Published content — articles, guides and coach profiles stay up for as long as they are live on the site.

Keeping it safe

Passwords are stored hashed, never in readable form. The whole site is served over HTTPS. Member information is restricted to administrators; members' files sit on private storage with per-folder access levels; event media is only ever served through links that expire. Public forms are rate-limited and screened for bots.

No system is perfect. If you think you have found a security problem, email team@leadingedge.ws and we will act on it.

Your rights

Under the UK and EU GDPR you can ask us to:

• give you a copy of what we hold about you;
• correct anything that is wrong;
• delete it;
• restrict or stop what we are doing with it;
• hand it over in a portable format;
• stop relying on legitimate interests, where you object;
• withdraw your consent to the newsletter.

We make no automated decisions about you and we do no profiling.

Email team@leadingedge.ws and we will respond within one month. It costs nothing. We may need to confirm who you are first, particularly before deleting anything.

If you are unhappy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. In the European Economic Area, complain to your national data protection authority. We would rather you gave us the chance to put it right first.

Children

This site is not aimed at children, and wingsuiting carries minimum ages set by national bodies. Please don't create an account if you are under 16, or under the age of digital consent where you live, without a parent or guardian involved. If we find we are holding a child's information without that, we will delete it.

Changes to this notice

Any changes are posted on this page and the date at the top is updated. If a change materially affects you we will say so on the site, and email members and subscribers.