Skip to content
SafetyScorer

Is Flightradar24 safe?

Flightradar24

For the person holding the phone, Flightradar24 is a low-risk app with no messaging and little to abuse. Its weak points are an ad label that includes your location, a 2018 breach of email addresses and hashed passwords, an out-of-date privacy policy and a 2025 Swedish reprimand over aircraft owners' erasure requests.

Medium confidence#25 of 74 in Travel, rides and delivery
Updated
Spot a mistake?

#25of 74 in Travel, rides and delivery

Medium confidence
Agree with our score?
App publisher
Flightradar24 AB (Stockholm, Sweden)
Users
About 30 million a month (company figure cited by IMY, 2025)
Data sources
30,000+ ground receivers picking up ADS-B signals, plus government and satellite feeds
Swedish GDPR decision
Reprimand and orders, no fine (IMY, 30 June 2025), over aircraft owners' erasure requests
Data breach
June 2018, email addresses and hashed passwords of accounts created before 16 March 2016
App Store label
Location, email, purchases and identifiers used to track you
Privacy policy
Last updated 15 August 2024
Age rating
4+ (App Store)

How the score breaks down

The overall score is the weighted average of these factors. Scoring rules

  • Privacy30% of score

    40 out of 100, Weak

    Apple's label lists precise and coarse location, email, purchase history, user and device IDs and advertising data as used to track you. Precise location is used for third-party ads, though not linked to your identity. The policy says opening an account means agreeing to direct marketing from third parties.

  • Security30% of score

    58 out of 100, Fair

    In June 2018 attackers reached a server holding email addresses and hashed passwords of users who signed up before 16 March 2016, and Flightradar24 reset those passwords. We found no paid bug bounty or published Two-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary login.

  • Transparency and control15% of score

    50 out of 100, Weak

    The policy, last updated in August 2024, still cites Sweden's 1998 Personal Data Act and the EU directive the GDPRThe EU's General Data Protection Regulation, which sets rules on how organisations collect and use personal data and allows large fines.More in the glossary replaced, next to the GDPR. Rights requests go by post. Inactive accounts are deleted after 12 months, and a privacy-choices tool manages ad consent.

  • Scams and harmful content15% of score

    82 out of 100, Good

    There is no user-to-user messaging in the app and little user content, and the 4+ rating fits a flight map. The privacy risk is to people being tracked, not to users. Aircraft owners can have registrations hidden, and FAA LADD blocks are honoured.

  • Regulatory record10% of score

    65 out of 100, Fair

    Sweden's IMY reprimanded Flightradar24 on 30 June 2025 for routinely demanding registration certificates from aircraft owners asking for erasure, and ordered it to handle three complaints and stop publishing those owners' aircraft data. No fine. The order is about data the app itself publishes, so it counts in full, at the top of the band for orders without a fine.

Is Flightradar24 safe?

For the person using it, yes: Flightradar24 is a map of aircraft with no messaging, no marketplace and almost nothing a stranger can use to reach you. The concerns sit elsewhere. The app's privacy label includes your location among the data used to track you for ads, a 2018 breach exposed older accounts, and its privacy policy has not caught up with current law. In June 2025 Sweden's data regulator reprimanded the company over how it treated aircraft owners who wanted their planes off the map. We score it 56/100.

What the app collects about you

Apple's privacy label is broader than you might expect for a flight map. It lists precise and coarse location, email address, purchase history, user ID, device ID, how you use the app and advertising data as data that may be used to track you across other companies' apps and websites. Device ID and advertising data are linked to you for third-party ads. Precise location is also used for third-party advertising, though the label says it is not linked to your identity.

The privacy policy, last updated on 15 August 2024, is short and dated. Next to the GDPRThe EU's General Data Protection Regulation, which sets rules on how organisations collect and use personal data and allows large fines.More in the glossary, it still refers to Sweden's 1998 Personal Data Act and the EU directive that the GDPR replaced in 2018. It says that by clicking "I accept" when opening an account, you agree to receive direct marketing "from us or third parties", which you can then refuse. Requests to see or delete your data go by letter to a Stockholm address. One rule does protect you: accounts inactive for 12 months are deleted. Some service providers are in the US, under EU standard contractual clauses.

You do not need an account to use the free map, which is the simplest way to share less.

The 2018 breach

In June 2018 Flightradar24 emailed users to say that an intrusion on one server may have exposed the email addresses and hashed passwords of people who registered before 16 March 2016. The Hacker News put the number at over 230,000 accounts; we found no figure from Flightradar24 itself. The company said the server was shut down at once, the hashing used in that retired part of its system was no longer considered strong enough, and it had reset the passwords. It said no payment data was taken, and it reported the breach to the Swedish authority. We found no regulator decision on it.

Since then we found no further breach. We also found no paid bug bounty and no published Two-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary login, so account security rests on your password.

Aircraft owners and the Swedish reprimand

Most aircraft broadcast their identity, position, speed and altitude through ADS-B transponders, unencrypted by design. Flightradar24 collects these signals through more than 30,000 ground receivers, many run by hobbyists, plus government and satellite feeds. It told the regulator it has about 30 million users a month.

For private owners, that means their movements can be public. Four complaints from Sweden, Germany and Denmark led Sweden's Authority for Privacy Protection (IMY) to rule on 30 June 2025. It found that a registration number can be personal data when a national register links it to a private owner. It accepted that Flightradar24 has a legitimate interest in publishing flight data. But it found that between May 2018 and June 2021 the company routinely demanded registration certificates before acting on erasure requests, and in one case asked for more proof from an owner who had already identified himself. IMY issued a reprimand, with no fine, and ordered the company to deal with three complainants' requests and stop publishing data that identifies their aircraft.

Flightradar24 now hides blocked aircraft so that only the type, such as "Cessna 172", appears and no history can be found by registration. It also honours the US FAA's LADD block list, and says aircraft such as Air Force One are not shown.

How to use Flightradar24 with less tracking

  1. Use the map without an account if you only want to follow a flight.
  2. Set location access to "While Using the App", or "Never" if you do not need the nearby-aircraft view.
  3. Turn off "Allow Apps to Request to Track" in iPhone settings.
  4. If you have an account from before March 2016, make sure its password is not reused anywhere else.
  5. If you own an aircraft, ask Flightradar24 to block it; you should not have to send more ID than needed to show it is yours.

How we scored it

Privacy (40) is the weakest factor, because location, email and purchases are listed for cross-app tracking and the policy bundles third-party marketing consent with sign-up. Scams and harmful content (82) is the strongest, as users face almost no contact with others. Security (58) carries the 2018 breach, and the regulatory record (65) reflects IMY's reprimand and orders, which concern data the app publishes about aircraft owners. Skyscanner scores 63 and Airalo 70.

Questions people ask

Does Flightradar24 track my location?

Only if you allow it. The privacy policy says the app needs your explicit permission to read your phone's precise location. Apple's label lists precise and coarse location among the data that may be used to track you across other companies' apps, and precise location is used for third-party advertising. Choose "While Using the App" or "Never" in your phone's settings.

Was Flightradar24 hacked?

Yes, in June 2018. Flightradar24 said an intrusion on one server may have exposed the email addresses and hashed passwords of users who registered before 16 March 2016, and that no payment data was involved. It reset the affected passwords and reported the breach to Sweden's data protection authority. One report put the number of accounts at over 230,000.

Can I stop my plane from showing on Flightradar24?

Yes, you can ask for it to be hidden. Flightradar24 flags a blocked aircraft so that the live map shows only its type, such as "Cessna 172", and searches by registration return no history. It also honours the US FAA's LADD programme. Sweden's privacy regulator ruled in 2025 that it may not routinely demand a registration certificate when the owner has already identified themselves.

Why is it legal to show where planes are?

Most aircraft broadcast their position, speed and altitude unencrypted through ADS-B transponders, so that others can see them. Flightradar24 picks these signals up with more than 30,000 receivers. Sweden's regulator found in 2025 that it has a legitimate interest in publishing flight data, but that a registration number can be personal data when it points to a private owner.

Sources

  1. 1.Flightradar24 Flight Tracker App Store listing and App Privacy label (opens in a new tab) · Apple App Store, 2026
  2. 2.Flightradar24 privacy policy (last updated 15 August 2024, archived 26 October 2026) (opens in a new tab) · Flightradar24, 2024
  3. 3.Final decision pursuant to Article 60 GDPR, Flightradar24 AB (DI-2021-3397) (opens in a new tab) · Swedish Authority for Privacy Protection (IMY), via EDPB, 2025
  4. 4.Why does it say that a flight is blocked? (opens in a new tab) · Flightradar24 Support, 2026
  5. 5.Flightradar24 flight tracking service suffers a data breach (opens in a new tab) · The Hacker News, 2018
  6. 6.Flight tracking service Flightradar24 suffered a data breach (opens in a new tab) · Security Affairs, 2018
  7. 7.Flightradar24 receives reprimand for violating aircraft data privacy rights (opens in a new tab) · PPC Land, 2025
Spot a mistake?