Log in Sign up
Draft, not yet reviewed. This is a plain-language working draft. It isn't legal advice, and it becomes final when the operator publishes a reviewed version.

Privacy Policy

Draft

This page explains what Vaeroly (https://vaeroly.com) stores about you, why, who else sees it, and how to have it removed. Vaeroly is operated by Mohammed Aboelnasr, based in Riyadh, Saudi Arabia, who is responsible for your account data. Each virtual airline's owner and staff are responsible for how they use what they see about their pilots. We collect only what the crew centre needs, and we never sell your data or use it for advertising.

1. What we store

  • Account: your name, email address, a securely hashed password (never the password itself) and, if you turn it on, your two-step login secret.
  • Profile details you choose to add: VATSIM CID, IVAO VID, SimBrief username, and your Discord user ID and username if you link Discord.
  • Airline membership: your pilot ID, the name shown in that airline, rank, hub, location, hours, points, awards, type ratings and staff roles at each airline you join, and requests you make there (such as hub transfers and leave).
  • Flights: bookings, flight plans and, while you fly with the ACARS app, the aircraft's position, altitude, speed, fuel and flight events (such as take-off, landing rate and warnings). Finished flights are compressed and kept as your flight history, with the comments you and staff write on them.
  • Payments (airline owners): the airline's subscription status and the PayPal subscription, customer and transaction IDs and amounts. Never your card or bank details, which only PayPal sees.
  • Security records: a log of staff and administrator actions, the ACARS devices signed in to your account, and failed sign-in attempts per account and connection (kept for up to a day) to stop password guessing.
  • Agreements: which version of these documents you agreed to, and when.

2. Cookies

We use one essential cookie to keep you signed in and to protect forms from forgery. There are no advertising or tracking cookies. See the Cookie notice.

3. Who can see it

  • Other pilots see your name, pilot ID, rank, flights and awards in the airlines you belong to. Public pages (such as rosters, leaderboards and the league) may show them too, unless you choose to be left off boards in your profile.
  • Staff of the airlines you join see your email address, network IDs, Discord ID, flight details and the comments on your flight reports, to run the airline. When an owner exports their airline's data, pilots' email addresses are left out.
  • Vaeroly administrators and support can see account data to keep the service running and safe.
  • Your password, two-step secret and ACARS keys are never shown to anyone.

4. Services we work with

Some features talk to other services, which receive only what that feature needs:

  • PayPal: airline subscriptions (airline owners only).
  • Discord: account linking and, when an airline connects its server, your nickname there, an optional role, and posts about flights and news.
  • SimBrief (Navigraph): flight plans for your bookings.
  • VATSIM and IVAO: we read their public data to see whether you're flying online. If you link through VATSIM's own sign-in, we receive only what you approve there.
  • Weather, schedules and maps (aviationweather.gov, OpenSky Network, OpenStreetMap / CARTO): they receive the requests, not your account details.
  • Our email and hosting providers: to send account emails from [email protected], and to run the site and its backups.

5. How long we keep it

We keep your data while your account exists; flight history stays so that ranks, hours and leagues remain correct. Bookings that are never flown are cancelled after two days. Encrypted backups are kept for up to six months (daily copies for a week, weekly for a month, monthly for six months), so deleted data leaves the backups as they are replaced.

6. Your choices and rights

  • Change your name, network IDs and SimBrief username, unlink Discord and change your password on your profile.
  • Download your data from your profile: your account, memberships, flights and comments.
  • Delete your account from your profile. Your account is deleted 30 days after you ask; until then it's hidden and signing in lets you keep it. Deleting removes your name, email, network IDs, Discord link, devices and personal details; your past flights stay in airlines' statistics without your name.
  • For anything else (a correction, a question or an objection), write to [email protected]. We reply within 30 days. Records we must keep for payment or legal reasons (such as PayPal transaction IDs) may be kept as long as required.

7. Security

The site uses HTTPS, passwords are hashed, backups are encrypted, two-step login is available, and signing out or changing your password ends your other sessions. No system is perfectly secure; if something goes wrong that affects your data, we will tell you.

8. Children

Vaeroly is not meant for children under 13, and we don't knowingly store their data.

9. Changes and contact

We may update this policy; each version is numbered and dated. Questions or requests: [email protected]. See also the Terms of Service.

Also: Terms of Service · Refund & Cancellation Policy · Cookie notice