Privacy Policy

1. Responsible Entity

VatBriefly is operated by Tastan Film Produktion, Senol Tastan, Holzgasse 20, 5242 Birr, Switzerland. Contact: letsgo@senolt.com

2. Data We Collect

Account: Email, password (hashed), display name. Via VATSIM OAuth: CID, name, rating, division.

Profile: Callsign, SimBrief username, social links, avatar — stored in Supabase (EU).

Flight Data: Career stats, achievements, flight logs — stored in Supabase and localStorage.

AI Interactions: Chat prompts forwarded to Anthropic Claude. Not permanently stored on our servers.

Voice: Audio sent to OpenAI Whisper for transcription. Not stored. TTS via ElevenLabs.

Payment: Processed by Stripe. We do not store credit card details.

3. Legal Basis (GDPR Art. 6 & Swiss DSG)

• Consent: VATSIM OAuth, voice features
• Contract: Account creation, payment processing
• Legitimate Interest: Service improvement, security

4. Third-Party Services

• Supabase (EU) — Database, authentication, file storage
• Anthropic Claude (US) — AI chat and phraseology
• OpenAI Whisper (US) — Voice transcription
• ElevenLabs (US) — Text-to-speech
• Stripe (US/EU) — Payment processing
• Railway (US) — Application hosting
• VATSIM — OAuth authentication, public pilot data
• Microsoft Clarity (US) — Anonymous heatmaps & session recordings, used to improve UX
• Google Analytics 4 (US) — Anonymous traffic analytics, only with your consent
• Google Ads (US) — Conversion tracking for paid campaigns, only with your consent

US transfers covered by Standard Contractual Clauses (SCCs). We do not sell your data.

5. Cookies & Tracking

Essential (always active):

• skybrief_session: Auth JWT (httpOnly, 7 days)
• sb-*-auth-token: Supabase auth session
• vb_consent_v1: Stores your cookie preference (localStorage)

Analytics & Ads (only with consent):

• Google Analytics 4 (_ga, _ga_*): Pageview & session statistics. Anonymized IP. Default: denied until you accept the cookie banner. Google Consent Mode v2 sends only cookieless modeled pings if declined.
• Google Ads (_gcl_*): Conversion tracking for our search ad campaigns. Default: denied until consent.
• Microsoft Clarity (_clck, _clsk): Anonymous behavioural analytics. We mask all input fields and never record PII.

You can withdraw consent at any time by clearing your browser's site data for vatbriefly.app.

6. Your Rights

Access, rectification, erasure, portability, objection, withdrawal of consent. Use Settings > "Reset All Data" or contact letsgo@senolt.com.

Supervisory Authority: FDPIC (Switzerland) or your local EU DPA.

7. Data Retention

Account data kept while account active. Deleted on request within 30 days. Payment records kept 10 years (Swiss law).

8. Children

Not intended for users under 16. We do not knowingly collect data from minors.

9. Contact

Tastan Film Produktion · Senol Tastan
Holzgasse 20, 5242 Birr, Switzerland
Email: letsgo@senolt.com · Phone: +41 76 344 45 28