This policy explains what personal data Virtual Real Cockpit collects when you visit virtualrealcockpit.com, buy a license or use the app, why we collect it, who we share it with and what rights you have. We collect as little as we can: there are no user accounts, we set no cookies and the app does not send usage data.
1. Who we are
Virtual Real Cockpit is published by Linh Vo ("we", "us"). We are the controller of the personal data described in this policy, except where we say another company is. You can reach us at [email protected] about anything in this policy. Licenses are sold by our merchant of record, Lemon Squeezy (Link, LLC, formerly Lemon Squeezy LLC), 222 South Main Street, Suite 500, Salt Lake City, Utah 84101, USA.
2. What we collect and why
When you visit the website
- Connection data. Our website is hosted by Cloudflare. To deliver pages and protect the site from abuse, Cloudflare processes your IP address, browser type, the page requested and the time of the request. We use this only to run and secure the site. Legal basis: our legitimate interest in operating a secure website (GDPR Art. 6(1)(f)).
- Visit statistics. We count visits with Cloudflare Web Analytics. It does not use cookies or local storage, does not fingerprint your device and does not track you across sites. We see totals only, such as page views and referring sites. Legal basis: legitimate interest (Art. 6(1)(f)).
- Tutorial videos. Tutorials are hosted on YouTube and embedded in privacy-enhanced mode (youtube-nocookie.com). Nothing loads from YouTube until you open a video. Once it plays, Google receives your IP address and viewing data under Google's privacy policy.
When you buy a license
- Payment. Lemon Squeezy (Link, LLC) sells the license as merchant of record. It collects your name, email address, billing address and payment details, handles tax and receipts, and is an independent controller of that data under its own privacy policy. We never see your full card details. The checkout window loads from Lemon Squeezy only when you choose Buy license.
- Order data. From Lemon Squeezy we receive your email address, name, country, order number, product, price paid and the license key issued. We use it to deliver your license, keep records of sales, handle refunds and answer your questions. Legal basis: performing our contract with you (Art. 6(1)(b)) and our legal obligations to keep accounting records (Art. 6(1)(c)).
- License email. We send your license key by email using Resend, which processes your email address and the message on our behalf. Each license key is issued once. We do not resend lost keys, so please keep the email.
When you use the app
- Update check. Once a day the app asks virtualrealcockpit.com for the latest version number. The request contains the app's version and, like any internet request, your IP address. We do not store it beyond standard server logs. You can turn the check off in Settings › General. Legal basis: legitimate interest in telling you about updates (Art. 6(1)(f)).
- License check. Your key is checked on your PC when you enter it. When the app starts, and once a day, it also sends the key's ID, a 12-character code that is not the key itself, to our license server at virtualrealcockpit.com, which answers whether the purchase was refunded. The request carries the app's version and, like any internet request, your IP address; we do not store it beyond standard server logs. The key itself, your name and your email are not sent. Legal basis: performing our contract with you (Art. 6(1)(b)).
- Everything else stays on your PC. Your car presets, settings, wheel models and logs are stored locally and never uploaded. The app has no account and sends no usage or crash data.
When you contact us
- If you email us, we receive your email address and whatever you include in the message, such as logs or screenshots. We use it only to answer you. Legal basis: legitimate interest in providing support, or performing our contract if you are a customer (Art. 6(1)(b) and (f)).
3. Who we share data with
We do not sell or rent personal data, and we do not share it for advertising. We share it only with these providers, each bound by a data processing agreement or acting as an independent controller:
- Cloudflare, Inc.: website hosting, security and visit statistics, and the server that answers the app's update and license checks (processor).
- Lemon Squeezy (Link, LLC): payment, tax and receipts (independent controller).
- Resend (Plus Five Five, Inc.): license key emails (processor).
- Google LLC (YouTube): tutorial videos, only when you play one (independent controller).
We may also disclose data where the law requires it, or to protect our rights in a legal dispute.
4. International transfers
These providers are based in the United States and may process data there. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
5. How long we keep it
- Order records: for as long as tax and accounting law requires, usually 10 years after the sale.
- Support emails: up to 24 months after the conversation ends, then deleted.
- Server logs: kept by Cloudflare for a short period under its own retention rules.
6. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, have it corrected or deleted, restrict or object to how we use it, and receive it in a portable format. Where we rely on legitimate interest, you can object at any time. To use any of these rights, email [email protected]. We will reply within one month. Deleting order records may be limited by our legal duty to keep them.
If you are in the EEA or the UK, you can also complain to your local data protection authority.
California residents. We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act, and we do not use sensitive personal information. You have the right to know, delete and correct the personal information we hold, and we will not treat you differently for using these rights.
7. Cookies
We do not set cookies on this website. YouTube may set cookies once you play a tutorial video.
8. Children
Virtual Real Cockpit is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has sent us personal data, contact us and we will delete it.
9. Security
All traffic to our website and update server is encrypted with HTTPS. Access to order records is limited to the people who need it to provide support.
10. Changes to this policy
If we change this policy, we will update the date at the top. If a change is significant, we will say so on this page and in the app's change log.
11. Contact
Linh Vo
[email protected]