Privacy policy

What data we collect, why, and what you can do about it. Written plainly — no lawyer paragraphs unless we have to.

Last updated: 2026-05-07.

Who we are

FFB-Bridge is an independent software project operated as FFB-Bridge. You can reach us about any privacy matter at feedbackffb-bridge.com.

What we collect

When you sign up for the beta download, we store:

  • Your email address — so we can send you the confirmation link and, if you consent, occasional beta-related updates.
  • Your IP address at signup — logged once, for abuse triage only. Never shown publicly, never shared.
  • A random token we generate to authenticate your confirmation and download links. It has no link to your personal identity beyond your signup row.
  • Signup, confirmation, and download timestamps — so we know when a subscriber confirmed and how many downloads they've used against their quota.

When you send feedback through the feedback form, we store the report text, optional category, optional reply email, submission timestamp, user-agent string, and a keyed hash of your IP address for abuse prevention. We do not publish feedback reports.

If you attach screenshots, we store the uploaded image files so we can inspect the bug or UI state you chose to share. Screenshots may contain anything visible on your screen, so review them before sending.

If you attach or upload a support bundle, we store the ZIP and parse its allow-listed text files into structured triage data: app version, build hash, operating system, hardware identifiers, simulator connection details, Doctor checks, and warning/error log lines. Passwords in SimConnect config are stripped by the app before the bundle is created. See Support bundles for the full file list and limits.

We don't collect names, addresses, phone numbers, credit cards, flight data, or any telemetry from the desktop application. The desktop app itself makes no outbound network calls except to your local simulator; see the FAQ on the home page.

Language choice and translations

The website is available in multiple languages. Language pages use visible URL prefixes such as /fr-ca/, /de/, and /ja/. When you explicitly choose a language, we store one first-party preference cookie named ffb_lang for up to 180 days so the bare home page can remember that choice. The cookie contains only the selected language code, such as fr-CA. It is not a tracking ID and is not shared with anyone.

Site translations are automatically generated and may contain mistakes. If you send translation corrections or language requests through the feedback form, we handle that message under the same feedback rules described on this page.

What we don't do

  • We don't use third-party analytics that set cookies or track you across sites. The site uses self-hosted Umami for aggregate page-view counts, referrers, device type, and browser/OS summaries; it is cookie-free and does not profile individual visitors. Query strings and URL fragments are excluded from analytics, and browser Do Not Track is respected.
  • We don't sell, rent, or share your email address with any third party for any purpose.
  • We don't send you marketing on behalf of anyone else.

Why we collect it

Three reasons:

  • Delivery of the beta download you asked for — your signup is the explicit request for this service.
  • Beta-specific updates (when you tick the consent box): new releases, breaking changes, bugs we discover after you've installed. Low volume — a handful of messages over the beta period, no more.
  • Abuse triage, if we see a signup pattern or feedback upload pattern that looks like an attack.
  • Support and debugging, when you choose to send feedback, screenshots, or a support bundle.
  • Language preference, when you choose a site language and ask the site to remember it on future visits.

Feedback reports are voluntary. You decide whether to include an email address, screenshots, or a support bundle.

We will never send you anything outside of those categories without separate, explicit consent.

Consent and withdrawal (CASL)

Under Canada's Anti-Spam Legislation, we only send commercial electronic messages to people who have given express consent. That's the checkbox on the signup form. You can withdraw consent at any time:

  • Click the Unsubscribe link at the bottom of any email we send you. That instantly marks your row as opted out and prevents any further send.
  • Or email feedbackffb-bridge.com from the subscribed address with "unsubscribe" in the subject. Processed within one business day, always faster than the 10-business-day CASL maximum.

Changed your mind after unsubscribing? Re-enter your email on the home page and tick the consent box again. You'll see a confirmation prompt that acknowledges the re-opt-in, then a fresh link lands in your inbox — no need to email anyone.

How long we keep it

Your subscriber row persists until one of:

  • You unsubscribe — we keep the row marked opted-out so we honor your choice even if the same address re-signs up later. No further messages are sent.
  • You email us asking us to delete your data — we delete the row entirely within 30 days of the request.
  • 12 months after the final 1.0 release of FFB-Bridge — at which point the beta subscriber list has served its purpose and we wipe it.

Feedback reports and screenshots are retained as long as needed for product support and bug history. Raw support-bundle ZIP files are retained for a short triage window, 30 days by default, so we can re-parse them if the parser improves; parsed support data may be kept with the feedback report after the raw ZIP is removed. You can ask us to delete a feedback report or bundle at any time.

Aggregate analytics are kept without cookies or visitor profiles. Server logs and abuse-prevention records are kept only as long as needed to operate and secure the site.

Your rights under PIPEDA

As a Canadian resident you can, at any time:

  • Access the personal information we hold about you. Email us from the subscribed address and we'll reply with your row contents.
  • Correct any information you believe is inaccurate.
  • Delete your data. We'll remove the row within 30 days.
  • Complain to the Privacy Commissioner of Canada if you're not happy with our response: priv.gc.ca.

Non-Canadian users

We welcome beta signups from anywhere. For users outside Canada, the principles above still apply — express consent, easy unsubscribe, no third-party sharing, minimal data collection. If you are a resident of the European Economic Area, United Kingdom, or California, the corresponding rights under GDPR / UK-GDPR / CCPA are honored through the same email-based access and deletion process described above.

Changes to this policy

If we make material changes we'll update this page and notify active subscribers by email before the change takes effect. Minor wording edits are logged via the "Last updated" date at the top.

Contact

Questions, access requests, unsubscribe requests, complaints — all to feedbackffb-bridge.com.