Privacy & data protection

The short version: we keep what the game needs to run your career, your card details never touch our servers, nothing is sold or tracked, and your data is yours to see, take, or delete.

Who we are

SkyHub: Pilot's Dark World (“SkyHub”, “we”) is a flight-simulation game operated at skyhubairways.com. For anything in this policy, write to [email protected] — a human reads it.

This page explains what personal data we hold, why we hold it, and the rights you have over it — including your rights under the EU General Data Protection Regulation (GDPR) and equivalent laws elsewhere.

What we collect, and why

  • Your account — email address, display name, and a one-way hash of your password (we cannot read the password itself). Needed to operate your crew account. Legal basis: performance of a contract.
  • Your gameplay — rosters, filed flights and their telemetry (route, times, landing data), in-game finances and cosmetics. This IS the product: a persistent career. Legal basis: performance of a contract.
  • Your purchase, if you bought direct — handled end-to-end by Paddle, our merchant of record. Your card number never reaches SkyHub and we never store it. From Paddle we receive your email address, the transaction reference and the amount, which we keep to deliver your license and honour refunds. Legal basis: performance of a contract and legal obligations (accounting).
  • Your purchase, if you bought from a storefront such as simMarket — handled entirely by them, under their privacy policy. We receive no payment data and no personal data from that sale at all: what reaches us is a batch of license keys, and we learn nothing about you until you redeem one and create a crew account here.
  • How you found us — when you create a crew account we record the site you clicked through from (the site name only, such as “simmarket.com” — never the full address, and never what you searched for) together with any tag on the link itself. It is written once, at signup, and never updated: we do not track your visits, and there is no record of anything you did before or after. It tells us which storefronts and pages actually bring pilots in. Legal basis: legitimate interest in knowing where our players come from — you can ask us to erase it.
  • Error reports — if the site or the Companion App crashes, a technical report (stack trace, browser or app version) may be sent to our error-monitoring service so we can fix it. Legal basis: legitimate interest in keeping the game working.

We do not run advertising, we do not sell or share personal data for marketing, and we do not profile you. There is no analytics tracker on this site: no page views are recorded, nothing follows you between visits, and the one line above about how you found us is written once when you sign up and never again.

Cookies

One cookie: the session that keeps you signed in. It is strictly necessary, first-party, and expires with your session. There are no advertising or analytics cookies, which is why there is no cookie banner.

Who processes data for us

A small set of processors, each doing one job under its own data-processing agreement:

  • Paddle — payments, taxes and invoicing, as merchant of record for purchases made direct from skyhubairways.com.
  • MongoDB Atlas — the game database.
  • Cloudflare — content delivery and artwork hosting.
  • Resend — transactional email (activation, password reset, license delivery). Never marketing.
  • Sentry — error monitoring.

We never transfer your data to anyone else except where the law requires it.

How long we keep it

Your account and career exist for as long as you keep them. If you ask us to delete your account, personal data is removed or irreversibly anonymised within 30 days, except transaction records we must keep for tax and accounting law, which are retained for the statutory period and no longer.

Your rights (GDPR)

Wherever you live, we extend the same rights:

  • Access — ask for a copy of the personal data we hold on you.
  • Rectification — have anything inaccurate corrected.
  • Erasure — have your account and personal data deleted.
  • Portability — receive your data in a machine-readable format.
  • Objection and restriction — object to a processing or ask us to pause it.

Email [email protected] from your account address and we act within 30 days, free of charge. If you are in the EU/EEA and believe we have not treated your data lawfully, you also have the right to complain to your local supervisory authority.

Age

SkyHub is not directed at children under 16, and we do not knowingly hold their data. If you believe a child has created an account, contact us and it will be removed.

Changes

If this policy changes in a way that matters, we say so plainly on this page and, for significant changes, by email. This revision: July 2026.