SOAR
Effective 2026-07-08

Privacy Policy

This policy explains what SOAR — the virtual airline platform at vasoar.app, operated on behalf of MetroAir Virtual Airlines and the VAs it hosts — collects and how it is used. Each hosted VA is the controller of its own pilots' data and may publish its own policy that incorporates this one.

01Who we are and scope

This platform policy covers the SOAR software and infrastructure, including the Discord bot, that VAs use to run their operations. Where you are a pilot of a specific VA, that VA's own privacy policy also applies and describes what it collects and displays about you.

02Information we collect

Account information
Your name, email address, and a securely hashed password. We never store your password in plain text.
Pilot profile
Your pilot code, rank, hub, awards, and related profile details within a VA.
Flight and ACARS data
Flight reports and telemetry recorded by the ACARS client during your simulator flights (for example route, times, positions, and landing metrics).
Network and location data
IP address and derived geolocation, used for security and anti-fraud screening (including detection of VPN/proxy use during signup and login).
Discord data
If you link Discord, the data described in the Discord integration section below.
Screenshot submissions
Images (and any caption) you submit to a screenshot competition, plus vote counts.
Cookies and session data
Cookies required to keep you signed in and to operate the site.

03How we use your information

  • To operate your account, pilot profile, flights, and progression.
  • To display rosters, leaderboards, and live activity within your VA (see your VA's policy for what it shows publicly).
  • To secure the platform and prevent abuse, duplicate accounts, and ban evasion.
  • To power the Discord integration you choose to enable.

04Discord integration

The SOAR Discord bot is a single platform application that a VA can add to its Discord server. If you link your Discord account, the following applies.

OAuth scopes we request
identify (to read your Discord user id and username) and guilds.join (to add you to your VA's Discord server).
What linking stores
Your Discord user id, your Discord username, and the date you linked. These are kept until you unlink or delete your account.
Presence display
The bot reports approximate online counts and voice-channel rosters for your VA. This is held only briefly in a cache (about 90 seconds) and is not stored historically. You can hide your name from presence displays using the hidePresence setting in your account; counts may still be shown without your name.
Roles and nicknames
The bot automatically assigns and updates Discord roles and (optionally) nicknames to reflect your rank, hub, and staff status, and keeps an audit log of these sync actions.
Notifications
The bot may post server notifications such as promotions, awards, milestones, PIREP approvals, and flight completions.
Screenshot competition
If you submit a screenshot, the image and thumbnail are stored on Cloudflare R2 and reactions are counted as votes.

Your use of Discord is also governed by Discord's own Privacy Policy.

05Third-party services we rely on

  • Discord — account linking, the bot, and server integration.
  • Cloudflare R2 — image/object storage (for example screenshots).
  • An IP-intelligence provider (ipapi.is) — VPN/proxy and geolocation lookups for anti-fraud.
  • Email delivery provider — transactional email (verification, notifications).
  • SimBrief and Navigraph — flight planning and charting features.
  • Map-tile providers — maps on the site (see the Attributions page).

06Data retention

We keep account, profile, and flight data for as long as your account is active. Discord presence data is ephemeral (cached for about 90 seconds). Role-sync audit logs are kept as an operational record. When you delete your account, we remove or anonymize your personal data except where we must retain limited records for security or legal reasons.

07Your choices and rights

  • Unlink Discord at any time from your account settings, which removes the stored Discord id, username, and link date.
  • Enable hidePresence to keep your name out of presence displays.
  • Request access to, correction of, or deletion of your account and personal data.

08Security

We use reasonable measures to protect your data, including hashed passwords and access controls scoped per VA. No online service can be perfectly secure, so we cannot guarantee absolute security.

09Children

The platform is not intended for anyone under 13, consistent with the Children's Online Privacy Protection Act and Discord's minimum age. We do not knowingly collect personal information from children under 13.

10International users

The platform is operated from the United States and data may be processed there. By using the platform you understand your information may be transferred to and processed in the United States.

11Changes to this policy

We may update this policy as the platform evolves. Material changes will be reflected by updating the effective date above.

12Contact

Questions about this policy or your data? Contact the staff in the MetroAir Discord server. A dedicated address (privacy@vasoar.app) will be monitored once platform email is set up.