Data minimization.
By design.
We collect only what is necessary for sim operations and account management. Here in plain text: what data we store, why, and how to request access or deletion.
Controller
The data controller within the meaning of GDPR is the operator of the Eurostarling project — contact details: Imprint.
What data we store
We process only data necessary for running the sim platform and Crew Center:
- Account data — pilot name (pseudonym possible), email, password (hashed), registration date
- Sim data — flight bookings, ACARS telemetry, performance evaluations, type-rating progress
- Technical logs — anonymized IP, user agent, request timestamp (retention ~30 days for error analysis and abuse detection)
- Communication data — if you contact us via Discord or the Crew Center, we store the message content for processing
We do not store real addresses, phone numbers, payment information or travel documents. Booking and pricing data are pure sim records without real financial relevance.
Legal basis
We process account data and sim data based on Art. 6(1)(b) GDPR (contract performance — you register to use the sim platform). Technical logs based on Art. 6(1)(f) GDPR (legitimate interest in stable operation and abuse protection). Optional analytics only based on your explicit consent (Art. 6(1)(a) GDPR).
Cookies
We use two types of cookies:
- Technically necessary — session cookie (login), CSRF token, language. No consent required.
- Optional (analytics) — Google Analytics for anonymized reach measurement. Only active after explicit consent in the cookie banner.
You can revoke your cookie consent anytime via the banner link in the footer.
External services
We use the following third parties:
- Discord — community platform. Clicking the Discord link transmits data to Discord. Privacy: discord.com/privacy
- SimBrief — OFP dispatch (in Crew Center). OAuth login if you link SimBrief. Privacy: simbrief.com
- Google Analytics — optional, only with consent. IP anonymization enabled.
- Font Awesome / CDN-Fonts — IP addresses are transmitted to the CDN providers when loading (Cloudflare, jsdelivr).
Retention
- Account data — as long as your account is active
- Sim data / flight history — as long as your account is active (for career statistics)
- Technical logs — ~30 days
- After account deletion — all personal data removed within 7 days. Anonymized aggregate statistics may persist.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), deletion (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). To exercise: Discord or the email in the imprint. Right to lodge a complaint with the competent supervisory authority (Berlin Commissioner for Data Protection and Freedom of Information).
Currency
As of: 17 May 2026