Privacy & data protection

Last updated June 2026.

WW2 RAF Project is a not-for-profit historical research and remembrance website. We are committed to protecting personal data and to handling it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We collect as little personal data as possible, and we never sell it.

Who is responsible for your data

For the purposes of UK data protection law, the operator of WW2 RAF Project is the “data controller” for this website. If you have any question about this policy or about personal data on the site, you can contact us at info@ww2rafproject.org.uk.

The historical records on this site

The heart of this website is a database of service personnel and the aircraft, units and operations they were part of. Almost everyone recorded here died during, or as a result of, the Second World War, and is therefore deceased. UK data protection law applies to information about living individuals, so in most cases these historical records are not “personal data” in the legal sense.

Where information about a living person does appear — for example a survivor of an incident, a named relative, or a photographer we credit — we rely on our legitimate interests in historical research and public remembrance, and on the legal basis of archiving in the public interest and historical research (Article 89 UK GDPR / the Data Protection Act 2018), subject to appropriate safeguards. We handle such records with care, and the rights set out below apply. If you are an individual named on the site, or a relative, and you believe something is inaccurate, intrusive or should be removed, please contact us and we will review it promptly.

Information we collect from visitors

• Nothing is required to browse. You can read the whole site without giving us any personal information. We run no public accounts, newsletters or comment forms.
• Aggregate analytics. We use Cloudflare Web Analytics to see which pages are visited and roughly where visitors come from. It is privacy-first: it sets no cookies, does not fingerprint your device, and does not track you across other sites. The figures we see are aggregated and anonymous.
• Server logs. Like all websites, our hosting keeps short-term technical logs (such as IP addresses) to keep the service secure and running. These are retained only briefly and are not used to identify or profile you.

Cookies

This website sets only essential cookies — for example, to keep an administrator securely signed in or to protect forms against misuse. These are necessary for the site to function and do not track you. Because our analytics are cookieless, no cookie-consent banner is required.

Affiliate links

Some pages link to relevant books on Amazon. As an Amazon Associate, WW2 RAF Project earns from qualifying purchases — at no extra cost to you. We link only to titles relevant to the history covered here. When you follow such a link, Amazon may set its own cookies under its own privacy policy, which we do not control.

Who we share data with

We do not sell or trade personal data. We use a small number of trusted service providers to run the website:

• Hosting — our application and database are hosted on a cloud platform; data may be processed on infrastructure located outside the UK, protected by appropriate safeguards.
• Content delivery & analytics — Cloudflare serves the site securely and provides the anonymous analytics described above.

We may also disclose information if required to do so by law.

Your rights

Under UK data protection law you have the right to: be informed about how your data is used; request access to any personal data we hold about you; ask us to correct inaccurate data; ask us to erase or restrict its use; and object to our processing. To exercise any of these, email info@ww2rafproject.org.uk and we will respond within one month.

If you are not satisfied with how we have handled your data, you have the right to complain to the UK’s Information Commissioner’s Office (ICO), ico.org.uk.

Children

This website is not directed at children, and we do not knowingly collect personal data from them.

Changes to this policy

We may update this policy from time to time; the date at the top shows when it last changed. Please see also our copyright & reuse statement.