Privacy Policy

Last updated: 24 July 2026

This policy explains what FPV Festival Simulator collects, why, and what you can do about it. The service is operated by Big Sky FPV ("we", "us"). If anything here is unclear, email alerts@fpvfestivalsimulator.com and we'll answer plainly.

The short version

You need a free account to fly. That means we store your email address and a hashed password.
We never see or store your card details. Payments are handled entirely by Stripe.
We don't sell your data, share it with advertisers, or run ad trackers.
You can ask us to delete your account and everything attached to it at any time.

What we collect

When you create an account

Data	Why
Email address	Identifies your account, restores your purchases on other devices, and lets us send password resets
Password	Stored only as a bcrypt hash. We cannot read it, and neither can anyone who obtained our database
Account creation date	Support and troubleshooting
IP address	Rate limiting, to stop automated abuse of sign-up and login
Session token	A random token stored in your browser so you stay signed in. Expires after 180 days of inactivity

When you buy something

Data	Why
Record of what you bought	To unlock that content on your account, on any device, permanently
Purchase confirmation from Stripe	Stripe tells our server that a payment succeeded and which product it was for

We never receive your card number, CVC, or billing details. Those go directly to Stripe and never touch our servers. Stripe's handling of that data is governed by Stripe's privacy policy.

When you play

The simulator stores your settings, controller preferences and unlocked content locally in your own browser (localStorage). That data stays on your device.

Music you load into the simulator is read entirely within your browser. Your audio files are never uploaded to us or anyone else.

When you visit any page

We use Cloudflare Web Analytics to see how many people visit the site and which pages are popular. It is privacy-first: it sets no cookies, does not fingerprint your device, and does not track you across other websites. It records only aggregate, non-identifying data — page views, the referring site, approximate country, and browser and screen type — and never builds a profile of you.

What we do not collect

Card numbers or billing addresses
Your name, phone number, or postal address
Location data beyond what an IP address implies
Contacts, files, or anything else on your device
Your music files

Who we share it with

We do not sell your data. We do not share it with advertisers. The only third parties involved are the services required to run the product:

Stripe — payment processing. They receive your payment details directly from you.
Hostinger — hosting for the website, game and database.
Our email provider — delivers password resets and purchase confirmations.
Cloudflare — privacy-first, cookieless web analytics. Receives no personal data and does not track you across sites.

We may also disclose information if legally required to do so, or where necessary to investigate fraud or abuse of the service.

How long we keep it

Account and purchase records — kept while your account exists, so your purchases keep working.
Session tokens — expire after 180 days of inactivity, or immediately when you log out.
Rate-limiting records — short-lived, typically hours.
Payment records — Stripe retains transaction records as required by financial regulations, independently of us.

Your rights

Whatever country you're in, you can ask us to:

Access — tell you what we hold about you
Correct — fix anything wrong
Delete — remove your account and its data. Note that deleting your account removes your purchase records too, which means any unlocks would be lost
Export — send you a copy of your data

Email alerts@fpvfestivalsimulator.com from the address on your account and we'll action it within 30 days. There's no charge.

If you're in the UK or EU, our lawful bases for processing are contract (running your account and delivering what you bought) and legitimate interest (security and abuse prevention). If you're in California, we do not sell or share personal information as those terms are defined by the CCPA.

Security

Passwords are hashed with bcrypt. Session tokens are stored hashed, not in plain text. Database queries use prepared statements. Sign-up and login are rate limited per IP. The site is served over HTTPS, and payment webhooks are cryptographically signature-verified.

No system is perfectly secure. If we ever discover a breach affecting your data, we will tell affected users promptly and describe what happened.

Children

This service is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, email us and we'll delete it. Users under 18 should have a parent or guardian's permission before making any purchase.

International users

Our servers are located in the United States. If you use the service from elsewhere, your data is processed in the US.

Changes

If we change this policy materially, we'll update the date above and note the change on the site. Continuing to use the service after a change means you accept the updated policy.

Contact

Big Sky FPV
alerts@fpvfestivalsimulator.com