Technical and privacy information for schools
Hamptonian Industries is an independent developer of educational applications for aviation, drone, STEM, engineering and career-readiness programs. This page gives a school's administrators and IT team what they need to review the platform. Every application is served from a single domain, so it can be reviewed and approved at once.
REVIEWED AGAINST THE APPLICATION CODE · 2026-09-30
Primary Domain: hamptonianindustries.com Application Domains: *.hamptonianindustries.com
Allowing these two entries covers every current and future Hamptonian application.
What the platform is for
The applications teach the knowledge and skills of aviation and drone careers, including weather, charts, aircraft systems, weight and balance, electronics, maintenance and workplace professionalism, through interactive simulations that run in a web browser on standard school devices, including managed Chromebooks. Teachers stay in control of levels, assignments and assessment. No application grades students with AI.
Collect as little as possible
- No account needed for most apps
Several applications have no accounts. Progress stays in the student's own browser and is never sent to a server.
- Aliases where accounts exist
The shared Hamptonian sign-in uses a teacher-issued alias (for example PILOT-27), with no real name and no email.
- No advertising or tracking
No ads, tracking pixels, third-party analytics or fingerprinting. Student data is never sold or shared for marketing.
- Teacher-controlled
Teachers create student accounts. Work sent between applications waits for teacher review before anything is created.
What each application stores is listed under Applications & data below.
How the platform is protected
- Transport
- HTTPS only. TLS certificates are issued automatically for every Hamptonian domain. Unencrypted HTTP is redirected to HTTPS.
- Isolation
- Each application is a separate deployment at its own subdomain with its own database credentials. One application cannot read another's sessions.
- Sessions
- HttpOnly, Secure, SameSite=Lax cookies scoped to a single application host. Passwords and sign-in codes are stored only as salted scrypt hashes.
- Secrets
- API keys and database credentials exist only on the server and are never sent to the browser.
- Browser protections
- The Hamptonian Industries site and portal send a strict Content-Security-Policy, clickjacking protection, X-Content-Type-Options, Referrer-Policy and Permissions-Policy. The same header set is being rolled out to every application as each one moves to its Hamptonian address.
- Single sign-on
- The optional Hamptonian sign-in is standard OpenID Connect (authorization code + PKCE), not a custom scheme.
Every address the platform uses
| Address | What it is | State |
|---|---|---|
| hamptonianindustries.com | Hamptonian Industries main site and this page | Platform |
| www.hamptonianindustries.com | Forwards to the main site | Platform |
| apps.hamptonianindustries.com | Application portal | Platform |
| status.hamptonianindustries.com | Application status | Platform |
| droneworks.hamptonianindustries.com | Hamptonian DroneWorks | Live |
| droneops.hamptonianindustries.com | Hamptonian DroneOps | Live |
| metarverse.hamptonianindustries.com | Hamptonian METARverse | Live |
| chartology.hamptonianindustries.com | Hamptonian Chartology | Live |
| equilibrium.hamptonianindustries.com | Hamptonian Equilibrium | Live |
| aeropuente.hamptonianindustries.com | Hamptonian AeroPuente | Live |
| aeronatomy.hamptonianindustries.com | Hamptonian AeroNatomy | Live |
| wattworks.hamptonianindustries.com | Hamptonian WattWorks | Live |
| dronecare.hamptonianindustries.com | Hamptonian DroneCare | Live |
| terraforge.hamptonianindustries.com | Hamptonian TerraForge | Live |
| hirelearning.hamptonianindustries.com | Hamptonian HireLearning | Live |
During the transition, each application also answers at its original *.vercel.app address, which then forwards to the address above. The downloadable sheet lists each original address.
Everything outside the Hamptonian domain
10 services are contacted directly by student browsers (map tiles, chart imagery and public-domain photographs). Everything else is contacted only by Hamptonian servers, which a school network never sees. Hosts marked “Yes, planned” will be moved behind hamptonianindustries.com so that the allow-list above eventually covers everything.
| Host | Why it is needed | Used by | Contacted by | Proxy via hamptonianindustries.com |
|---|---|---|---|---|
| *.hamptonianindustries.com (served by Vercel's edge network) | Vercel: Hosting for every Hamptonian site and application. Browsers see only Hamptonian domain names; the TLS certificate is issued for the Hamptonian domain. | All applications | Student browser | Not needed |
| *.vercel.app | Vercel (transition period): The applications' original addresses. They keep working during the move to hamptonianindustries.com and then forward to the new addresses. | All applications, until migration completes | Student browser | Not needed |
| *.neon.tech | Neon (PostgreSQL): Database for the applications that have accounts. Only Hamptonian servers connect; student browsers never do. | DroneWorks, DroneOps, DroneCare, Equilibrium, HireLearning | Server only | Already proxied |
| hamptonian-droneworks.vercel.app → droneworks.hamptonianindustries.com | Hamptonian sign-in (DroneWorks): Optional student sign-in. The browser is redirected there to sign in and then returned to the app. | Chartology, TerraForge (optional sign-in) | Student browser | Not needed |
| basemap.nationalmap.gov | USGS imagery base map on the Flight Environment map | DroneWorks | Student browser | Yes, planned |
| gibs.earthdata.nasa.gov | NASA satellite cloud imagery overlay | DroneWorks | Student browser | Yes, planned |
| Google speech service (Chrome Web Speech API) | Optional voice questions in Explícamelo: Chrome sends the spoken audio to Google for transcription. Typing is always available instead | AeroPuente, HireLearning | Student browser | No |
| mesonet.agron.iastate.edu | Weather radar overlay (Iowa Environmental Mesonet) | DroneWorks | Student browser | Yes, planned |
| nowcoast.noaa.gov | NOAA weather radar layer on the Mission Control map | DroneOps | Student browser | Yes, planned |
| pub-aa40b363ea1547439b6db9137557acbf.r2.dev | FAA sectional chart image tiles (Hamptonian-owned Cloudflare R2 bucket) | Chartology | Student browser | Yes, planned |
| s3.amazonaws.com (elevation-tiles-prod) | Open terrain elevation tiles for the terrain/altitude views | Chartology | Student browser | Yes, planned |
| services.arcgisonline.com, tiles.arcgis.com | Base map and FAA chart layers on the Mission Control aviation map | DroneOps | Student browser | Yes, planned |
| services6.arcgis.com | FAA UAS Facility Map grid (LAANC altitudes) | Chartology | Student browser | Yes, planned |
| upload.wikimedia.org, commons.wikimedia.org, www.nasa.gov and 15 other photo hosts | Historical and career photographs on the Map My Path page (loaded directly; the galleries already re-serve images through the app) | AeroPuente | Student browser | Yes, planned |
| aviationweather.gov | Live METAR/TAF weather | DroneWorks, DroneOps, METARverse, HireLearning | Server only | Already proxied |
| dronedj.com, uasweekly.com, www.thedronegirl.com, www.dronexl.co, www.faa.gov | Industry news feeds and their images (fetched and screened on the server; images re-served from this app) | DroneWorks | Server only | Already proxied |
| s3.amazonaws.com (elevation-tiles-prod) | Open terrain elevation data for the 3D weather scene (fetched by the server) | METARverse | Server only | Already proxied |
| tfr.faa.gov, services6.arcgis.com | FAA temporary flight restrictions and UAS facility map data | DroneOps | Server only | Already proxied |
- ✕Advertising networks or tracking pixels
- ✕Third-party analytics (no Google Analytics, no Vercel Analytics)
- ✕Google Fonts requests from the browser (fonts are bundled and served from Hamptonian domains)
- ✕Social-media embeds or share widgets
- ✕Browser fingerprinting
- ✕Supabase (no application uses it)
Application catalog
The student command center: today's flight environment and briefing, every Hamptonian app in one launcher, industry news screened for the classroom, and the optional student sign-in the other apps can trust.
- Sign-in:
- Students may sign in with a teacher-issued alias (no real name or email). Teachers sign in with email and password.
- Student data stored:
- Student alias, A/B schedule group, program year and a password hash. No real names, no email addresses.
Program planning for drone programs: A-Day/B-Day scheduling, Gantt timelines, student assignments, approvals and Mission Control, the all-day classroom operations display.
- Sign-in:
- Instructor passcode; students use instructor-issued classroom codes.
- Student data stored:
- Display name chosen by the instructor, classroom handle (e.g. 1A-04), cohort, program year and assigned work.
Learn to read aviation weather reports one group at a time. Real METARs from airports worldwide become a living weather window, built on the WWW • VCT • DAR framework.
- Sign-in:
- No accounts. Progress stays in the student's browser; students share progress codes with the teacher.
- Student data stored:
- None on the server. Progress is saved only in the student's own browser.
Interactive sectional chart training on real FAA charts: airspace that rises off the page, symbol hunts, route planning, a drone's-eye altitude view and LAANC grids.
- Sign-in:
- No account needed. Optional Hamptonian sign-in through DroneWorks; teachers may make it required.
- Student data stored:
- None of its own. With the optional sign-in it receives the student's alias and cohort from DroneWorks.
Aircraft weight and balance made visible: a 3D hangar where students place loads, watch the CG move inside the envelope, then calculate, load, fly and explain it.
- Sign-in:
- Instructor passcode; students use instructor-issued sign-in codes.
- Student data stored:
- Display name and handle set by the instructor, cohort, program year, lesson progress. No email or other personal information.
Aviation English explained in natural Mexican Spanish. The English term always stays on screen, so students learn the concept and the word their class uses.
- Sign-in:
- No accounts. Saved words and progress stay on the student's device.
- Student data stored:
- None on the server. Saved words and progress stay on the student's device.
Build an F450 quadcopter with a Pixhawk flight controller part by part, using a 3D digital twin: wiring, calibration, component labs and the science behind each system.
- Sign-in:
- No accounts. Progress stays in the student's browser.
- Student data stored:
- None on the server. Progress is saved only in the student's own browser.
A 3D electronics lab: real circuit simulation, bench instruments, Arduino control and propulsion labs that unlock the systems students later install in AeroNatomy.
- Sign-in:
- No accounts. Progress stays in the student's browser.
- Student data stored:
- None on the server. Progress is saved only in the student's own browser.
Fleet management for classroom drone fleets: service tickets, the Service Bay, diagnostics, parts, an immutable maintenance audit trail and the lessons behind each repair.
- Sign-in:
- Accounts created by the instructor (email and password). On shared displays students appear only by technician callsign (e.g. TECH-07).
- Student data stored:
- Sign-in email, first name and last initial, technician callsign, role, and the maintenance work they record.
Construction progress mapping from capture to report: mission planning, mosaics, inspection and week-over-week comparison on a simulated construction site.
- Sign-in:
- No account needed. Optional Hamptonian sign-in through DroneWorks; teachers may make it required.
- Student data stored:
- None of its own. With the optional sign-in it receives the student's alias and cohort from DroneWorks.
Workplace professionalism practiced inside interactive workplace simulations and assessed against the CTEC Professional Skills Rubric. Teachers set the levels and there is no AI grading.
- Sign-in:
- Accounts created by the school (email and password). Industry partners use expiring invite links.
- Student data stored:
- Name, school email address, password hash, program, and rubric evidence and scores.
For a full review
- Technical sheet (plain text) covers domains, services, data and security, and pastes easily into a ticket.
- Live status page lists every application and its current state.
- Detailed privacy architecture, authentication design and network documentation are available to schools on request.
Questions from a school
Email info@hamptonianindustries.com for security questionnaires, data-privacy agreements or allow-list help.