Privacy Policy

This Privacy Policy describes how ActuallyLeviticus ("we", "us", "our") collects, uses, and handles your personal information when you use actuallyleviticus.xyz and its associated services.

1Information We Collect

We collect the minimum information necessary to operate the plugin upload service.

Via VATSIM Connect (OAuth):

• VATSIM CID — your unique VATSIM member identifier
• First and last name — as registered on your VATSIM account

Via Google Sign-In (admin only):

• Email address — used solely to verify admin identity

Uploaded files:

• Plugin files you upload, along with metadata (file name, upload time, uploader CID)

We do not collect passwords, payment information, IP addresses, or browsing analytics.

2How We Use Your Information

• Authentication: Your VATSIM CID is checked against an approved list to determine upload access.
• Attribution: Your CID and name are stored alongside uploaded plugins for accountability.
• Session tokens: Short-lived signed tokens are stored only in your browser's session storage and expire automatically (8 hours for uploaders, 24 hours for admins).

3Data Storage

• Approved uploader records (CID and display name) are stored in a Cloudflare D1 database.
• Uploaded plugin files are stored in Cloudflare R2 object storage.
• All data is hosted on Cloudflare's infrastructure. No data is transferred to third parties.

4Data Sharing

We do not sell, rent, or share your personal data with any third parties. Data is only used internally for the purposes described above.

5Data Retention

• Approved uploader records are retained until manually removed by the admin.
• Uploaded plugin files are retained until manually deleted.
• Session tokens expire automatically and are not stored server-side.

6Your Rights

You may request:

• Access to the personal data we hold about you.
• Deletion of your data, including removal from the approved uploader list and any uploaded files.
• Correction of any inaccurate information.

To make a request, contact us at the email below.

7Security

All communication with this website is encrypted via TLS/SSL. Authentication tokens are cryptographically signed using HMAC-SHA256. We follow security best practices to protect your data.

8Cookies

This website does not use cookies. Session data is stored in your browser's sessionStorage and is cleared when you close the tab.

9Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page.

10Contact

If you have questions about this Privacy Policy or wish to exercise your data rights: