vCareer
Notify me
LEGAL

Privacy Policy

Last updated 2026-05-26

vCareer is a career tracker built on top of a public network. We store only what we need to make progression auditable and to verify mission completion. No advertising, no third-party trackers, no profile selling. This policy is the canonical statement of how we handle your data. A developer-facing summary lives at /docs/privacy.

What we store

  • VATSIM identity. Your cid, callsign, display name, and country — returned by VATSIM Connect OAuth on sign-in.
  • Game state. Classes you've entered, tier and XP per class, type ratings you've earned or purchased, your declared simulator and hangar.
  • Mission history. Every offered, accepted, completed, expired, or abandoned mission. We keep these for audit and to compute the "first-time at airport" bonus.
  • Position samples. While you have an accepted mission, we sample your live VATSIM position every 15 seconds and persist it. Samples are how we verify takeoff, landing, diversion, and disconnect server-side.
  • Economy ledger. Every ∀Cred credit and debit (rewards, type-rating purchases, fees) — the source of truth for your balance.
  • Beta waitlist email (only if you submit one). Stored solely to email you when beta opens; deleted in full once beta is public.

What we do not store

  • Your password. Authentication is OAuth via VATSIM Connect. We receive a short-lived token; we never see the password you typed.
  • Anything from your sim. vCareer doesn't read MSFS, X-Plane, or P3D. We don't install anything on your machine. We work entirely from the public VATSIM feed.
  • Web analytics, of any kind. No Google Analytics, no Plausible, no Segment, no Mixpanel, no tracking pixels, no ad SDKs, no session replay. We do not fingerprint browsers and do not collect ad IDs. The only counters we keep are first-party game-state counters (mission count, XP, balance) the game logic needs to function.
  • Cookies beyond what's strictly necessary. One HTTP-only signed session cookie for authentication; one localStorage entry for your theme preference. That's it.
  • Your real name or email, unless you optionally provide one for support contact, or submit one to the beta waitlist.

Who we share it with

Nobody. We do not sell, rent, share, or distribute your data to any third party for any reason. We do not run marketing partnerships, affiliate programs, or data-broker relationships.

The only data leaving our servers is:

  • Outbound requests to VATSIM's public APIs (auth + data feed) and to aviationweather.gov for METAR fallback — both required for the Service to function.
  • Data we send back to you (the signed-in pilot) when you load the app.

Where it lives

Production runs on Cloudflare. The application database is Cloudflare D1 (managed SQLite), accessed by a single Cloudflare Worker. Data does not leave the Cloudflare network in normal operation.

Retention

  • Game state and economy ledger: kept as long as your account exists.
  • Mission history: kept as long as your account exists. Old missions are how "first-time at airport" stays meaningful and how leaderboards stay honest.
  • Position samples: kept for 90 days after the related mission's terminal state, then deleted. The mission's outcome (completed / diverted / failed) is retained without the raw samples.
  • OAuth tokens: stored only for the duration of the session; refreshed via VATSIM Connect, never long-lived in our database.
  • Beta waitlist email: kept until beta opens to the public, then the entire table is dropped. Single transactional email at that point; no newsletter.

During alpha, retention windows above are targets — the implementation may keep more for debugging while we tune the completion verifier. We will tighten this before public launch.

Your rights

  • Export. Signed-in pilots can request a full JSON export of their account from Settings.
  • Delete. Signed-in pilots can delete their account from Settings. Game state, mission history, and position samples are removed within 30 days; the economy ledger keeps a zero-balance audit record for the same retention window then is purged.
  • Waitlist removal. If you joined the beta waitlist and want off it: email the address on the contact page. We will remove your row and reply to confirm.
  • Questions. See /contact.

Children

vCareer is not directed at children under 16. Sign-in is gated by VATSIM, whose terms set their own minimum age. We do not knowingly collect data from children.

Changes

We may update this policy as the Service evolves. Material changes will be flagged on the changelog. The "last updated" date at the top of this page reflects the most recent change.

Plain English on purpose. We will revise this with counsel before public launch.