Privacy

What we keep, what the shared world shows, and your choices

Charter Inc is made and run by Pedro Bianchi Ponce Leon de Lima, an individual based in Brazil ("we"). This notice says what we keep when you play, why, who handles it for us, and how to reach us. Write to [email protected] with any question.

What we keep, and why

Your account

  • Your e-mail address, to sign you in, to confirm the address, and to send a password reset code when you ask for one.
  • A hash of your password, never the password itself.
  • When the account was made, whether its e-mail is confirmed, and failed sign-ins (five wrong passwords in a row lock the account for 15 minutes).

Your company and your flights

  • The company you make (its name, code, callsign and home base) and everything it does in the game: aircraft, trips, money, reputation.
  • Your flights: your aircraft's position every two seconds while you fly, the flight's result, and a verification trace of each flight, kept 90 days, so the server can check flights are flown as the rules say. When a flight is held for review, we ask your app for its full recording.
  • In the app, the SimBrief username you enter (to fetch your flight plans from SimBrief), and the settings you choose.

Running the service

  • The address a request comes from, to limit how many requests one address can make, and in the server's logs, with the page asked for and the time, to run the service and keep it safe. The logs are rotated as they grow: each part of the server keeps its latest 50 MB, days to weeks of requests.

We don't sell your data, show advertising, or use tracking cookies.

What the shared world shows

Charter Inc is one world shared by every player. Other players can see your company's name, code, callsign and home base, its aircraft, its reputation and its flights, and your aircraft on the map while you fly. Your e-mail address is never shown.

Who handles it for us

  • Hetzner Online GmbH, Germany: the server and its database.
  • Cloudflare, Inc.: this website, the domain's name servers, the downloads, forwarding the mail sent to [email protected], Turnstile, the check on the sign-up form that a person, not a program, is making the account, and Web Analytics, which counts this website's visits.
  • Oracle (Oracle Cloud Infrastructure Email Delivery), United States: the account e-mails (confirmation links and reset codes).
  • Paddle, once billing opens: payments and sales tax, as our reseller. Paddle handles your payment details; we never see them.

This website

The site sets no cookies. We count its visits with Cloudflare Web Analytics, which uses no cookies either: the pages seen, the site that sent you, your country, your kind of device and browser, and how fast the pages loaded, as totals, not a profile of you. It counts this website only, never the app.

While you create an account, the site keeps your e-mail address in that browser tab only, so the "check your e-mail" step still knows it after a reload; it's gone when you close the tab.

Your choices

You can ask for a copy of your data, its correction, or the deletion of your account, under Brazil's LGPD, the EU's GDPR or your own country's law. Write to [email protected] from your account's address. Deleting the account deletes its company and flights; the world's history keeps its past trips without your name.

Changes

When this notice changes, the date below changes too, and a change that matters is announced to players first. This notice takes effect on October 28, 2026.