Version 2026-09-10. Member registration remains closed until the controller and processing details below are completed.
Responsible controller and contact
Member registration and salary contributions are closed while the responsible controller and processing details are being documented. This page describes the planned service; it is not a completed controller disclosure.
Public tools
The contract comparator and ATPL worksheet calculate in your browser without sending entries to Fly HR. The comparator can also save one comparison in this browser’s local storage when you choose Save. It is not saved automatically. Use Delete saved comparison or clear site storage to remove it. Print/PDF output is handled by your browser or operating system. The application tracker stores records in your browser’s local storage until you remove them or clear that storage. Its export downloads a file to your device. These records are not connected to your member account.
Contact enquiries
The separate contact form asks for a name or pen name, reply email address and message. These are sent to the site’s administrative mailbox to handle your enquiry. Do not include salary records or other sensitive information in a contact message. Mail providers and mailbox retention must be included in the processing details below.
Member accounts
The planned account flow requests a username and password. It does not request your name or email address and does not collect newsletter or job preferences. Choose a username that does not identify you. WordPress stores a password hash; it does not store a readable copy of your password. A recovery code is displayed once and its hash is stored for password recovery. Keep the original code privately.
We retain the account creation date, terms/privacy acknowledgement version and time, and the relationship between your account and your reports. Pseudonymous records remain personal data when they can be linked to a person. The service does not promise absolute anonymity.
Salary contributions
Reports include year, actual gross compensation, currency, paid months, operating country or worldwide, department, role, work arrangement and experience band. Administrators can see your report and its account association to moderate it. No employer name, payslip upload or free-text salary account is requested.
We ask separately for permission to use each report in grouped public research. Public output requires five distinct accounts in a matching cohort and shows a rounded median and sample-size band. Individual amounts and usernames are not published. These controls reduce, but cannot eliminate, identification or inference risk.
Purposes and proposed legal bases
Account and authentication processing is necessary to provide the requested account service. Salary research contributions are optional and use the specific permission given at submission; you can withdraw them in your account. Abuse prevention uses limited security information to protect the service. The responsible controller must confirm the applicable lawful bases and associated notices before registration opens.
Cookies, security records and external services
Login uses necessary WordPress authentication cookies. The member page uses a session cookie to protect forms against cross-site requests. Temporary rate-limit counters use a keyed hash of the connection IP address; application counters expire after inactivity of up to one hour. Hosting and security services may separately retain IP addresses and access logs.
External websites receive connection information when you follow their links. Existing article images, embedded material or avatars may contact external providers when displayed. The member tools add no advertising or email-marketing service.
Providers, transfers and server retention
Provider, server-log, backup and transfer details must be completed before member registration opens.
Control, access and deletion
Signed-in members can export account details and reports, withdraw a report, or delete their community account and reports. Deletion removes active records; backup retention is governed by the provider details above. Previously copied public summaries cannot necessarily be retracted. Browser tracker records must be removed separately on each device.
Reports last modified more than three years ago are eligible for daily scheduled deletion. Accounts remain until deleted. A lost password can be reset only with the recovery code; without either credential, we cannot reliably identify the account owner.
Your rights
Depending on applicable law, you may have rights of access, correction, deletion, restriction, portability, objection and withdrawal of consent, and the right to complain to a supervisory authority. Withdrawing a salary report does not change the lawfulness of earlier processing. Use the controller’s privacy contact when available for requests not supported in your account.
Age and changes
The member service is intended for adults aged 18 or over. Policy acknowledgements record the version shown. Material changes requiring renewed acknowledgement will be presented before another salary contribution is accepted.