Privacy Policy

Effective date: February 25, 2026

This Privacy Policy explains what personal data VAFlights processes, why we process it, and how users can exercise their GDPR rights.

Who We Are

VAFlights is a virtual airline operations platform used to authenticate users through Discord and manage flight-logging activity.

Data We Process

We process the following categories of data:

• Identity data from Discord OAuth (Discord user ID, username, display/global name).
• Operational account data (pilot ID, role assignments, permissions).
• Flight activity data that users submit (routes, times, statuses, review outcomes).
• Security/session data required to keep users signed in and protect accounts.
• Administrative audit events needed for security, moderation, and integrity.

Lawful Bases (GDPR)

• Contract/performance: providing access to the VA platform and core flight logging functionality.
• Legitimate interests: platform security, abuse prevention, and operational administration.
• Consent: optional cookie/storage preferences where required by applicable law.

How We Use Data

• Authenticate users and maintain sessions.
• Display pilot dashboards, logbooks, and rankings.
• Enable role-based permissions and administrative workflows.
• Provide records necessary for VA management and dispute resolution.

Cookies and Similar Technologies

Essential cookies are used for security and authentication. Optional cookies/local storage are used only for convenience preferences and can be accepted or rejected via Cookie Preferences.

Retention

Data is retained only as long as reasonably needed for VA operations, security, auditability, or legal obligations. Data no longer needed is deleted or anonymized where feasible.

Your GDPR Rights

Where GDPR applies, users may request:

• Access to personal data.
• Rectification of inaccurate data.
• Erasure of personal data (subject to legal/operational constraints).
• Restriction of processing.
• Objection to certain processing.
• Data portability where applicable.
• Withdrawal of consent for optional processing at any time.

International Transfers

Data may be processed in regions outside your country depending on infrastructure and service providers. Where required, reasonable safeguards are applied to protect transferred data.

Security

We apply technical and organizational measures to reduce risk of unauthorized access, alteration, disclosure, or loss of data.

How to Contact Us

For privacy requests, contact VAFlights staff through the official VA Discord server administration channel. Include your Discord ID and request type (access, correction, deletion, or objection).

Complaints

If you are located in the EEA/UK and believe your data has been handled unlawfully, you can also complain to your local data protection authority.