Privacy Policy

Last updated: 13 October 2026

Pilot Syllabus is a free study reference. You don't need an account and we don't ask for personal data to read it. In line with the EU General Data Protection Regulation (GDPR), Spain's Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSI), this policy explains what data is processed when you use the site, and why.

1. Data controller

Controller
Pablo Asensio Martínez, owner of Pilot Syllabus
Tax ID (NIF)
06010425L
Address
Travesía de Téllez 1, 28007 Madrid, España
Privacy contact
[email protected]

2. What we process, why, and on what legal basis

2.1. When you visit the site

To deliver each page, your browser connects to our infrastructure providers, Cloudflare (content delivery and security) and Google's Firebase Hosting (hosting). They necessarily receive your IP address, browser, the page requested and the date and time.

  • Purpose: serving the site, keeping it available and protecting it from attacks and abuse.
  • Legal basis: legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
  • Retention: technical logs for the limited period set by these providers. We do not use them to identify you.

The site's fonts and libraries are served from our own domain: loading a page does not send your IP address to any other third party.

2.2. Analytics (only if you accept)

If you accept analytics cookies in the cookie notice, we use Google Analytics 4 (through Firebase) to learn which topics get read and how to improve the site. It records pages viewed, reading time, device and browser type, approximate location (country or region) and referring page, tied to a random identifier stored in a cookie. Google Analytics 4 does not log or store IP addresses.

  • Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22(2) LSSI). If you don't accept, Google Analytics is never loaded.
  • Withdrawing consent: at any time from "Cookie settings" in the footer of every page. Rejecting deletes any analytics cookies already set.
  • Retention: at most 14 months in Google Analytics.
  • We don't use this data for advertising or profiling, and Google Analytics' advertising features are off.

Each cookie is listed in the Cookie Policy.

2.3. AI assistant (chat)

The chat is optional. What you type and any images you attach are sent to Google (Gemini, through Firebase AI Logic) to generate the answer. When you send your first question, the Firebase App Check security service uses Google reCAPTCHA v3 to check you are not a bot, which means Google receives technical data about your browser and how you interact with the page.

  • Purpose: answering your questions and protecting the service from automated abuse.
  • Legal basis: providing the service you request by using it (Art. 6(1)(b) GDPR) and legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
  • Retention: we don't keep conversations; they are gone when you close or reload the page. Google keeps prompts for a limited period under its Gemini API terms, among other things to detect prohibited use.
  • Don't include personal data or sensitive information in the chat.
  • Answers are generated by AI and may be wrong. The chat is only for users aged 18 and over.

2.4. If you email us

If you write to [email protected] or [email protected], we process your email address and the content of your message to reply.

  • Legal basis: legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR) or, when you exercise a right, a legal obligation (Art. 6(1)(c) GDPR).
  • Retention: as long as needed to handle the enquiry and then for the applicable limitation periods.

2.5. Data kept only in your browser

The site stores in your browser's local storage (localStorage) your light or dark theme, the sidebar licence filter, the last topic you visited, your study progress and your cookie choice. This data is never sent to our servers or to third parties, and you can clear it from your browser.

3. Recipients and processors

We don't sell or share your data. The only parties that receive it are the providers that run the service on our behalf:

  • Google Ireland Ltd. / Google LLC: Firebase Hosting, Google Analytics, Gemini (Firebase AI Logic) and reCAPTCHA.
  • Cloudflare, Inc.: content delivery and security.
  • Apple Distribution International Ltd.: email (iCloud Mail) for the @pilotsyllabus.com addresses.

We may also disclose data to public authorities where the law requires it.

4. International transfers

Google, Cloudflare and Apple may process data in the United States. These transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework, under which they are certified, and additionally on the Commission's standard contractual clauses.

5. Your rights

You can at any time exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent without affecting the lawfulness of earlier processing. Email [email protected] saying which right you are exercising. We will reply within one month.

If you think we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) or the supervisory authority where you live.

Visitors outside the EU

  • United Kingdom and Switzerland: you have the same rights described above, exercised the same way, and can complain to the ICO or the FDPIC.
  • United States (including California): we do not sell personal information or share it for cross-context behavioural advertising. If your browser sends a Global Privacy Control signal, we treat it as a rejection of analytics.
  • Everywhere else: every visitor gets the same safeguards described in this policy.

6. Children

The site is not aimed at children under 14 and we don't knowingly collect their data. The AI chat is only for users aged 18 and over.

7. Advertising

The site currently shows no advertising. If that changes, this policy and the cookie policy will be updated first, and you will be asked for consent before any advertising cookie is set.

8. Security

The whole site is served over HTTPS only. With no user accounts or forms, we keep no databases of visitors' personal data.

9. Changes to this policy

We may update this policy when the site or the law changes. The date of the last update is shown at the top. If a change affects your consent, we will ask for it again.