Who we are
This website is operated by the World Air Sports Federation (W.A.S.F.), Orange County, California, United States. In this policy “W.A.S.F.”, “the federation”, “we” and “us” mean the World Air Sports Federation.
For any question about this policy or your personal data, write to info@worldairsportsfederation.org or call +1 (818) 913-9338.
What we collect
We collect only what you give us and what the website needs to work. Depending on what you use, this can include:
- Account — your name and email address. Your password is never stored; only a one-way scrypt hash of it is.
- Membership profile — date of birth, gender, nationality, phone number, physical and mailing address, emergency contact, sports and disciplines, experience, certifications and a profile photo.
- Identity verification (for plans that require it) — identity documents, a self-photo, your legal name, ID number, issuing place and residency status.
- Signed agreements — the documents you accepted and their version, the name, date of birth and typed signature you entered, the date and time, your IP address and browser.
- Guardian consent (members under 18) — the parent or guardian’s name, relationship, email address and signature.
- Payments — plan, amount, currency, status and payment reference. Card details are entered on Stripe’s secure page and never reach our servers.
- Championships — your entries and the details on the entry form, including private details (phone, address, licence number, insurer, blood type and emergency contact).
- Rankings and results — results you submit and requests to link your account to a ranking profile.
- Certificates — licences, ratings and other qualifications you upload.
- Judicial High Court — complaints you file, the organisation or person you name, the incident details and evidence files.
- Messages, newsletter and job applications — what you send through the contact, membership-enquiry and careers forms, and your email address if you subscribe to the newsletter.
- Security and activity — your signed-in devices (IP address and browser), sign-in attempts and the events of your account.
The visitor counter in the footer stores a total only. It records no personal data.
How we use it
- To create and run your account and your membership, and to issue your federation ID and digital card.
- To verify your identity. Documents are reviewed by federation officers — there are no automated or AI decisions.
- To take payments and renewals.
- To organise championships, publish start lists and official results, and maintain the World Medal Ranking.
- To review complaints filed with the Judicial High Court and record its decisions.
- To send the emails your account needs (codes, decisions, receipts, reminders) and the newsletter, only if you confirmed your subscription.
- To keep the website and your account secure, prevent abuse and keep an audit trail of officer actions.
- To meet legal and financial record-keeping obligations.
What is public
- Official results and the World Medal Ranking show the athlete’s name, nation, medals and results.
- Championship participant lists show approved athletes only — name, nation and team, never contact or medical details.
- Scanning a membership card’s QR code opens a verification page that shows the member’s name, nationality, plan, status, validity and whether their identity is verified.
- The Judicial High Court publishes counts only. The names of complainants and protected athletes are never published.
- The sanctions register lists organisations and individuals sanctioned by a decision of the World Council, with the reference and date of that decision.
Who processes data for us
We use service providers to run the website. They process data only to provide their service to us:
- Website hosting, database and private file storage providers.
- Resend — delivers our emails.
- Stripe — processes payments on its own secure pages.
- Have I Been Pwned — when you choose a password, only the first five characters of a one-way fingerprint of it are sent, to check it against known data breaches. Your password itself never leaves our server.
Photographs from Pexels are delivered through our own server, so Pexels does not receive your visit. We do not sell personal data and we do not use advertising or analytics trackers.
How we protect it
- Identity documents, ID numbers, private championship details, certificates and court evidence are encrypted (AES-256-GCM) before they are stored.
- Only federation officers can open them, and every opening is recorded in the activity log.
- Your session is kept in a secure, HTTP-only cookie; you can sign out any device from your Athlete Hub.
- Passwords are checked against known breaches and stored only as a strong one-way hash.
How long we keep it
- Account, profile and membership records — while your account exists and as part of the federation’s membership records.
- Identity documents — kept as part of the federation’s membership verification record.
- Signed agreements and payment records — kept as legal and financial records.
- Official results and rankings — kept as the permanent sporting record.
- Court complaints and decisions — kept as part of the court’s records.
- Newsletter — until you unsubscribe. Notifications in your Athlete Hub — your newest 200.
- Signed-in sessions — they expire 30 days after you last use the website.
Your choices
- Download a copy of your data — Athlete Hub → Security & my data (your password is asked again, and you receive an email about it).
- Correct your details — Athlete Hub → Profile & contact.
- Unsubscribe from the newsletter in one click from any newsletter email.
- Sign out other devices — Athlete Hub → Security & my data.
For any other request about your personal data — including access, correction, deletion or objection — write to info@worldairsportsfederation.org. We will answer as required by the law that applies to you.
Members under 18
Athletes under 18 can become members only with the consent of a parent or legal guardian, who reviews and signs the membership agreements.
International members
The federation is based in the United States and serves members around the world. Your data may be processed in countries other than your own by the service providers listed above.
Changes to this policy
When this policy changes, the date at the top of this page changes with it. Significant changes are announced on the website.