1) Who we are
JST Virtual (“vJST”) is a non-commercial, community-run virtual airline. For the purposes of applicable data protection laws, we act as the data controller for personal data collected via this website and our Discord integrations.
We aim to comply with applicable data protection laws. If you are based elsewhere, local rights may also apply.
2) Data we collect
Account & Identity
Display name, email, Discord ID/username, VAMSYS pilot ID, and profile details you provide.
Service Data
Flight bookings and reports (via VAMSYS), event sign-ups, rank/role, support tickets, and messages you send to us.
Technical
IP address, device/browser info, pages viewed, timestamps, and diagnostics (server logs, error logs).
Transactions
Donation records (amount, time, reference). Payment details are processed by our payment provider and not stored by us.
Website analytics (in-house)
We record basic page view events on our own server (no ads, no third-party tags): page path & title, referrer, timestamp, and a privacy-preserving anonymous ID (derived from IP + browser) to count unique visitors. If you are logged in, events may include your Discord ID for staff-only auditing of restricted pages.
3) How we use your data
- Authenticate members (e.g., Discord OAuth) and operate community features.
- Manage pilot profiles, ranks, events, and flight operations via VAMSYS.
- Moderate our community and enforce rules (e.g., anti-abuse, security).
- Provide support and respond to enquiries.
- Improve the site and troubleshoot technical issues.
- Comply with legal/accounting obligations where applicable (e.g., donation records).
- Produce aggregated usage statistics and audit access to staff-only tools (e.g., Admin pages) to keep the community secure.
4) Lawful bases
We rely on one or more of the following lawful bases when processing your data:
- Consent — e.g., optional cookies or communications you opt into.
- Contract — to provide the services you request (membership, VA operations).
- Legitimate Interests — run a safe, effective community and improve our services.
- Legal Obligation — retain certain records for accounting or compliance purposes.
6) Data retention
- Member accounts: for the life of the account, then typically up to 12 months after closure (e.g., audit logs, backups).
- Server logs: usually up to 90 days unless needed for security/investigation.
- Donation records: up to 7 years for accounting/legal obligations.
- Analytics events (in-house): raw page-view logs kept for up to 6 months, with aggregated reports retained longer for trend analysis.
We may retain minimal information to respect suppression/opt-out requests.
8) Your rights
Subject to applicable law, you may have rights to:
- Access a copy of your personal data.
- Rectify inaccurate or incomplete data.
- Delete your data (“erasure”) in certain cases.
- Restrict or object to certain processing.
- Data portability (receive your data in a usable format).
- Withdraw consent where processing is based on consent.
To exercise your rights, see Contact below. You also have the right to lodge a complaint with your local data protection authority.
9) Security
We apply technical and organisational measures designed to protect your data (e.g., access controls, encryption-in-transit, least-privilege). No online service can be 100% secure; we continually review and improve our safeguards.
10) Children
Our services are aimed at flight simulation enthusiasts. We do not knowingly collect personal data from children without appropriate consent where required by law. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.
11) Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and adjust the “Last updated” date. Material changes may also be announced in Discord or on the website.
12) Contact us
If you have questions or requests about this policy or your data, contact us:
- Email: admin@jstvirtual.net
- Discord: Use the support channel or open a ticket.
- Website: Contact page
If you are not satisfied with our response, you may have the right to contact your local data protection authority.