تسجيل الدخول إنشاء حساب

سياسة الخصوصية

النسخة 19 · نُشرت في 04 أكتوبر 2026

This page explains what Vaeroly (https://vaeroly.com) stores about you, why, who else sees it, and how to have it removed. Vaeroly is operated by Mohammad Aboelnasr, based in Riyadh, Saudi Arabia, who is responsible for your account data. Each virtual airline's owner and staff are responsible for how they use what they see about their pilots. We collect only what the crew centre needs, and we never sell your data or use it for advertising.

1. What we store

  • Account: your name, email address, a securely hashed password (never the password itself) and, if you turn it on, your two-step login secret.
  • Profile details you choose to add: VATSIM CID, IVAO VID, SimBrief username, and your Discord user ID and username if you link Discord.
  • Airline membership: your pilot ID, the name shown in that airline, rank, hub, location, hours, points, awards, type ratings and staff roles at each airline you join, and requests you make there (such as hub transfers and leave).
  • Flights: bookings, flight plans and, while you fly with the ACARS app, the aircraft's position, altitude, speed, fuel and flight events (such as take-off, landing rate and warnings). Finished flights are compressed and kept as your flight history, with the comments you and staff write on them.
  • Security records: a log of staff and administrator actions, the ACARS devices signed in to your account, and failed sign-in attempts per account and connection (kept for up to a day) to stop password guessing.
  • Agreements: which version of these documents you agreed to, and when.
  • Messages to us: the name, email address and message you send through the contact form.
  • Pilots moved from another system: when an airline moves to Vaeroly, its staff may bring over their pilot list (name, email address, pilot ID, rank and hours) so each pilot can claim their record, even before that pilot has an account here.
  • Visit logs: like most websites, our web server and network provider keep short-lived technical logs of requests (IP address, page, time and browser) to keep the site running and secure.
  • The Vaeroly EFB phone app: keeps your sign-in, your current flight, your checklist ticks and recent dispatch messages on your phone, so the EFB works without a connection, and checks the crew centre about once a minute for new messages to show as notifications. At sign-in it sends a device name such as "Vaeroly EFB on Pixel 8", shown with your other signed-in devices on your profile. It sends no location, analytics or advertising data, and signing out deletes what it kept on the phone.

2. Cookies

We use a few cookies, all listed in the Cookie notice: an essential one that keeps you signed in and protects forms from forgery, two small preference cookies (theme and language) set only when you choose one, and security cookies from our hosting and network provider. There are no advertising or tracking cookies.

3. Who can see it

  • Other pilots see your name, pilot ID, rank, flights and awards in the airlines you belong to. Public pages (such as rosters, leaderboards and the league) may show them too, unless you choose to be left off boards in your profile.
  • Anyone, if you turn on your public profile (it's off until you do): the name you chose, the month you joined, your hours, flights and distance, your rank, hours and awards at the airlines listed in the public directory, the countries and airports you've visited, your Cup places and your recent routes with their dates, never your email, network IDs or live position; search engines list it only if you allow it.
  • Staff of the airlines you join see your email address, network IDs, Discord ID, flight details and the comments on your flight reports, to run the airline. When an owner exports their airline's data, pilots' email addresses are left out.
  • Vaeroly administrators and support can see account data to keep the service running and safe.
  • Your password, two-step secret and ACARS keys are never shown to anyone.

4. Services we work with

Some features talk to other services, which receive only what that feature needs:

  • Discord: account linking and, when an airline connects its server, your nickname there, an optional role, and posts about flights and news.
  • SimBrief (Navigraph): flight plans for your bookings.
  • VATSIM and IVAO: we read their public data to see whether you're flying online, using the member IDs you enter on your profile.
  • Cloudflare: our network provider. It protects and speeds up the site, runs the "confirm you're human" check on sign-in, sign-up and contact forms, counts page visits without cookies (Web Analytics), serves the map library, and stores our encrypted off-site backups. It sees your IP address and browser details when you visit.
  • Weather, schedules and maps (aviationweather.gov, OpenSky Network, OpenStreetMap / CARTO): they receive the requests, not your account details.
  • Images and sound files chosen by airlines: Vaeroly doesn't store them. Airline logos, banners, award badges, dashboard images and fleet pictures are links to the airline's chosen host. Your browser loads them from there, which tells that host your address. Vaeroly's emails don't load them. In the same way, the screenshots a pilot links to a flight claim load from the website the pilot chose, and an airline's cabin sound pack from the website the airline chose (the ACARS app fetches it): that website sees your IP address and browser or app details, as any website you visit does.
  • Our hosting provider and email delivery service: they run the site and its backups, and deliver account emails from [email protected]. Both are bound to keep your data confidential and to use it only for that.
  • Error reports: when something on the site breaks, a technical report of the error may go to an error-tracking service, set up not to send personal details such as your email address, IP address or cookies.

These services, and our own servers, may be in a different country from yours. We only share what each one needs.

5. Signing in with VATSIM

If you sign in with VATSIM, VATSIM sends us, with your permission, your VATSIM CID, your name, your email address and your controller and pilot ratings.

  • Why: to sign you in, to confirm your VATSIM CID for the airlines you fly for (so staff know it's really yours), and to show your ratings on your profile.
  • How long: we keep it while your account exists. When you delete your account it is removed within 30 days, like the rest of your account data.
  • Who sees it: the same people as your other profile details (see "Who can see it" above). We never share it with anyone else and never sell it.
  • Unlinking: unlink VATSIM on your profile at any time (Profile → unlink VATSIM), or delete your account.

6. How long we keep it

We keep your data while your account exists; flight history stays so that ranks, hours and leagues remain correct. Bookings that are never flown are cancelled after two days. Encrypted off-site backups are kept for up to six months (daily copies for a week, weekly for a month, monthly for six months), so deleted data leaves the backups as they are replaced. Before each update of the site, the server also keeps a copy of the database on the server itself, so the update can be undone; these copies are not encrypted, and only recent ones (about the last 10 updates) are kept, the oldest being removed as new updates come in.

  • Contact messages are kept so we can answer and follow up, and deleted a year after we dealt with them; messages our spam filter catches are kept with the reason for 90 days, so we can check the filter, then deleted. Ask us and we delete yours.
  • The log of staff and administrator actions is kept for two years (a few entries about airlines, such as when one was created or approved, are kept for good, and so is an owner's choice to stop the weekly airline summary, so it stays off for airlines they create or take over later). Answers to "Was this helpful?" on help pages are kept for a year.
  • Notifications (the bell) are deleted 90 days after you read them, or after a year if you never do.
  • Pilots moved from another system stay with that airline until the pilot claims the record or the airline is closed. Write to us to have an unclaimed record removed.
  • Visit logs are deleted automatically after a short time.

7. Your choices and rights

  • Change your name, network IDs and SimBrief username, unlink Discord and change your password on your profile.
  • Download your data from your profile: your account, memberships, flights and comments.
  • Delete your account from your profile. Your account is deleted 30 days after you ask; until then it's hidden and signing in lets you keep it. Deleting removes your name, email, network IDs, Discord link, devices and personal details; your past flights stay in airlines' statistics without your name.
  • For anything else (a correction, a question or an objection), write to [email protected]. We reply within 30 days. Records we must keep for legal reasons may be kept as long as required.

8. Security

The site uses HTTPS, passwords are hashed, off-site backups are encrypted, two-step login is available, and signing out or changing your password ends your other sessions. No system is perfectly secure; if something goes wrong that affects your data, we will tell you.

9. Children

Vaeroly is not meant for children under 13, and we don't knowingly store their data. If you're under 18, ask a parent or guardian before you sign up. You can keep your name off public boards in your profile.

10. Changes and contact

We may update this policy; each version is numbered and dated. Questions or requests: [email protected]. See also the Terms of Service.

إصدارات سابقة

أيضًا: شروط الخدمة · إشعار ملفات تعريف الارتباط