Privacy Policy

APRS Net — www.aprsnet.uk and the APRS Net Android, iOS and desktop apps
Last updated: 12 June 2026

Important — read this first. APRS Net is built on top of Amateur Packet Reporting System (APRS) and APRS-IS, an open, worldwide, publicly-accessible amateur radio network. Any position, status, message or weather packet you transmit through this service — whether via radio, the app, or the web dashboard — is broadcast in the clear to every APRS-IS server, client and website in the world, including third-party sites such as aprs.fi. This is fundamental to how amateur radio and APRS work, is required by amateur radio licence conditions in most countries (no encryption of amateur transmissions), and cannot be made private by this service. Do not transmit anything via APRS that you do not want to be public.

1. Who we are

APRS Net is a self-hosted APRS-IS gateway, tactical map and companion app suite, operated by an individual UK-licensed radio amateur (callsign 2E0LXY) as a free, non-commercial service for the amateur radio community. The software is open source under the GNU General Public Licence v3.

Contact: via QRZ.com (2E0LXY), or through the project's GitHub repositories.

2. What this policy covers

This policy covers:

3. Information we collect

3.1 Without an account (anonymous use)

The map, station list, weather data and live traffic feed can all be used without creating an account or entering any personal information. In this mode we do not collect or store any personal data about you. Standard web server logs (IP address, request time, user agent) may be retained briefly by the hosting provider for security and abuse-prevention purposes, in line with normal web hosting practice.

3.2 Amateur radio callsign and APRS-IS passcode

To transmit (beacon your position, send messages, or inject packets) you provide your amateur radio callsign and your APRS-IS passcode. The passcode is a publicly-documented, non-secret value mathematically derived from your callsign (per the standard APRS-IS passcode algorithm) — it is not a password and is not treated as confidential. Your callsign is, by definition, public information associated with your radio licence.

3.3 Free member account (optional)

Creating a free aprsnet.uk account enables cross-device sync, direct member-to-member messaging, geo-fence alerts, and weather-station beaconing. To create an account we collect:

DataPurpose
Display name and email addressAccount identification, login, and (if you choose) the optional MOTD/notification system
PasswordStored as a salted hash — never in plain text, never visible to us
Callsign(s) and SSIDs you registerTo route APRS messages addressed to you, and to identify "your" stations on the map
Map filter and appearance preferencesSynced across your devices (e.g. which traffic types to hide, message background theme)
Geo-fence alert rulesStored so alerts can be evaluated server-side and pushed to all your devices
Message historyAPRS messages and direct member-to-member messages sent/received through your account, stored so they sync across your devices

3.4 Location data

If you enable beaconing in the app, your device's GPS location is used to construct an APRS position packet, which is then broadcast publicly via APRS-IS as described in the warning box above. The app itself does not send your raw location to our servers for any purpose other than constructing that packet — your position becomes part of the public APRS network the moment it is beaconed, exactly as if you had transmitted it over radio.

If you configure a personal weather station (Ecowitt) for automatic WX beaconing, the station's location, API credentials and weather readings you provide are stored on our server (encrypted at rest where practicable) solely to poll the Ecowitt API and construct APRS weather packets on your behalf, which are then likewise broadcast publicly.

3.5 Messages

Standard APRS messages are, like position packets, broadcast publicly via APRS-IS and are not private. "Direct" messages between two aprsnet.uk members bypass APRS-IS and are relayed only via our server's infrastructure and stored so they appear in your message history on all your signed-in devices — but they are not end-to-end encrypted, and as the service operator we are technically able to access message content stored on the server. We do not read member messages except as necessary for debugging, abuse reports, or legal compliance.

4. Third-party services

Some features call third-party APIs. Data sent to these services is limited to what's needed for the feature to work:

ServiceWhat's sentWhy
aprs.fiLink-outs only (we don't send data on your behalf)Looking up a station's history when you click through
QRZ.comCallsign lookupsShowing operator profile info on the station detail panel
aisstream.ioNone of your data — we relay their public AIS ship feed to youShowing marine vessels on the map
Ecowitt APIYour station credentials (if configured) to fetch readingsAutomatic APRS WX beaconing
UK Met OfficeNone of your data — we relay their public severe weather warningsWeather warning overlay
OpenStreetMap / map tile providersStandard map tile requests (your approximate viewport, not your identity)Displaying the map

5. Data sharing

We do not sell, rent, or share your personal data with advertisers or data brokers. We do not run advertising or third-party analytics/tracking SDKs in the apps. The only "sharing" that occurs is the inherent, by-design public broadcast of APRS traffic described above, which applies equally to every APRS station and gateway worldwide.

6. Data retention and deletion

7. Children's privacy

APRS Net is intended for radio amateurs and is not directed at children. Holding an amateur radio licence typically requires meeting a minimum age set by the relevant national regulator. We do not knowingly collect data from children.

8. Security

The website and apps communicate over HTTPS/TLS. Passwords are stored as salted hashes. Member API access uses per-session tokens. As with any online service, no method of storage or transmission is 100% secure, and this is provided on an "as is" basis by a volunteer-run, non-commercial project.

9. Your rights

If you are in the UK or EU, you have rights under UK GDPR / EU GDPR including access to, correction of, and deletion of your personal data, and the right to object to processing. To exercise these rights, contact us using the details in Section 1.

10. Changes to this policy

We may update this policy from time to time as the service evolves. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the service after a change constitutes acceptance of the revised policy.