FS TrackerThis policy explains how the service made up of the FS Tracker Windows app, the iOS app, the fstracker.app website and the api.fstracker.app server (“FS Tracker”) processes personal data. The data controller is Mustafa Özdemir, the developer of FS Tracker. Questions: admin@fstracker.app.
1. Data we collect
| Data | When | Detail |
|---|---|---|
| Account details | Registration and sign-in | Email address and display name. If you register with email, your password is stored only in an irreversible form (an argon2id hash). |
| Apple / Google identity | Signing in with Apple or Google | The permanent user identifier the provider gives you, your email address and (on Apple, if you share it at first sign-in) your name. With Apple's “hide my email” option we receive Apple's relay address instead of your real one. |
| Flight data | When the Windows app detects a flight in the simulator | The simulated aircraft's position, altitude, speeds, vertical speed, heading, pitch and bank, gear, flap and throttle positions, fuel quantity, wind and outside air temperature; aircraft name, model, type, livery, tail number and flight number; takeoff, landing and touchdown values. This is data about the aircraft in the simulation, not your real location. |
| Connected devices | Signing in to or pairing the Windows app | Your computer's name, when it was added and when it last connected. Only a hash of the device key is stored. |
| Subscription status | When you purchase a subscription | Whether the subscription is active, the product and the period end date. Your payment and card details never reach us; Apple takes the payment. |
| Technical logs | On every request to the server | Server logs such as IP address, request time and request path. Kept for security and debugging. |
On your computer the Windows app stores only its own settings, the encrypted device key (using Windows DPAPI) and the email address you last used; your password is never saved.
2. What we use the data for
- Creating your account, keeping your session open securely and linking the Windows app to your account.
- Recording your flights and providing history, replay, statistics and live tracking.
- Verifying that your subscription is valid.
- Keeping the service secure, preventing abuse and fixing faults.
Legal basis: the formation and performance of the service contract, and our legitimate interest in the security of the service (KVKK art. 5/2-c and f; GDPR art. 6/1-b and f).
3. Live sharing
Live sharing is on by default. While it is on, the position, altitude, speed, heading, aircraft type and call sign of your flight in progress may be shown to other users on the FS Tracker live map. The call sign is your flight number, or failing that your tail number, or failing that your display name.
You can turn live sharing off in the iOS app under Account → Live sharing. With it off your flights are still recorded but not broadcast; in that case you cannot follow your own flight live either. Your flight history is always visible only to you.
4. Who we share data with
We do not sell your data and we do not share it for advertising. To run the service we work with these providers:
- Apple — Sign in with Apple and subscription payments through the App Store.
- Google — Sign in with Google.
- RevenueCat — managing subscription status. Purchase information and your FS Tracker user identifier are passed to RevenueCat.
- Server hosting provider — operating the server where the data is stored.
Some of these providers may process data outside Türkiye and the European Economic Area (for example in the United States). Where legally required, we may share data with the competent authorities.
5. Retention periods
- Account and flight data: until your account is deleted.
- Session refresh tokens: at most 180 days; invalidated when you sign out.
- Desktop pairing codes: five minutes, single use.
- Device keys: until you revoke them or your account is deleted.
6. Deleting your account
You can ask for your account and all your flight data to be deleted by writing to admin@fstracker.app from the email address registered to your account. Your request is completed within 30 days at the latest. Because subscriptions are managed through Apple, you also need to cancel yours in your Apple ID settings.
7. Your rights
Under article 11 of the KVKK and, to the extent it applies, under the GDPR, you have the right to learn whether your data is being processed, to request information and a copy, to have it corrected or erased, to object to processing and to ask for your data to be ported. You can send your requests to admin@fstracker.app. You also have the right to complain to the Turkish Personal Data Protection Authority or to the supervisory authority in your own country.
8. Security
All connections are encrypted (HTTPS/WSS). Passwords are stored with argon2id, and device and session keys are stored hashed. If a revoked session key is detected being reused, every session on that account is closed.
9. Children
FS Tracker is not directed at children under 13, and we do not knowingly collect data from children of that age.
10. This website
fstracker.app uses no cookies and loads no third-party analytics, advertising or font services. The server keeps standard technical logs (IP address, browser information, requested page) for every visit.
11. Changes
We may update this policy. We will announce significant changes in the app or on this page; the date above shows the last update.