Privacy Policy
Effective: May 2025 · English version
1. Who We Are
SimCockpit (“we”, “us”) is operated by Simcockpit.app, Dielmannstr. 13, 63069 Offenbach am Main, Germany. Contact: support@simcockpit.net. This Privacy Policy explains what personal data we collect, why, and your rights over it. A German-language version is available at Datenschutzerklärung.
2. Data We Collect
- Account data — email address, display name (if provided), and authentication tokens when you register or sign in with Google.
- Subscription data — your current plan, billing status, and Stripe customer reference. We never store full card details.
- Device data — device identifiers and platform info for paired Android devices.
- Usage data — server-side logs (IP address, timestamp, request path) retained for up to 30 days for security and debugging purposes.
- Cookies — session cookies necessary for authentication, and optional analytics cookies if you consent.
3. Legal Basis (GDPR)
- Contract performance (Art. 6(1)(b)) — account, subscription, and device data.
- Legitimate interest (Art. 6(1)(f)) — server logs, security monitoring.
- Consent (Art. 6(1)(a)) — optional analytics cookies.
4. Third-Party Service Providers
- Supabase — database and authentication (US, SCCs applied).
- Stripe — payment processing (US, EU-US DPF certified).
- Vercel — web hosting (US, SCCs applied).
- Resend — transactional email (US, SCCs applied).
All third parties act as data processors under a Data Processing Agreement (DPA) and may not use your data for their own purposes.
5. International Transfers
Some providers are located in the United States. Transfers are protected by Standard Contractual Clauses (SCCs) under Art. 46 GDPR, and/or the EU-US Data Privacy Framework where applicable.
6. Retention
We retain account and subscription data as long as your account is active. You may request deletion at any time via Dashboard → Settings → Delete Account. Logs are purged after 30 days. Legal retention obligations (tax records, etc.) may apply for up to 10 years.
7. Your Rights
Under GDPR you have the right to:
- Access your personal data (Art. 15)
- Correct inaccurate data (Art. 16)
- Delete your data — “right to be forgotten” (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
- Withdraw consent at any time (Art. 7(3))
- Lodge a complaint with your national supervisory authority
To exercise any right, email support@simcockpit.net. We respond within 30 days.
8. California Residents (CCPA / CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) as amended by CPRA:
- Right to know what personal information is collected and how it is used.
- Right to delete personal information (subject to exceptions).
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information. We do not sell or share personal information with third parties for cross-context behavioral advertising.
- Right to non-discrimination for exercising your privacy rights.
To submit a verifiable consumer request, contact support@simcockpit.net.
9. Children's Privacy
SimCockpit is not directed to children under 16. We do not knowingly collect data from anyone under 16. If you believe we have, please contact us immediately.
10. Changes to This Policy
Material changes will be communicated to registered users by email at least 14 days before taking effect. The “Effective” date at the top reflects the latest revision.