theREDCAP← Back

Legal

Privacy Policy

Last updated: March 11, 2026

We keep this simple: we do not use tracking cookies, analytics, or advertising technology. This policy explains exactly what minimal data we do handle, why, and how.

1. Who We Are

theREDCAP ("we", "our", "us") is a flight simulation software product providing load management tooling for PMDG aircraft in Microsoft Flight Simulator. Our website is operated at theredcapsim.com.

2. What Data We Collect

  • —Account information: When you register, we store your email address and a hashed password in Firebase Authentication. We do not store plain-text passwords.
  • —Purchase records: When you buy a product, Stripe processes your payment. We store a record of the completed transaction (product ID, Firebase user ID, timestamp) in our Firestore database to grant you access to your purchase. We never see or store your card number.
  • —Support messages: If you contact us via the Contact MOCC form, your name, email address, and message are sent to our support inbox. We retain these only for as long as needed to resolve your query.

3. Cookies & Local Storage

Local Storage (not cookies)

We use your browser's localStorage — not HTTP cookies — for the following purposes:

  • —redcap_cart — persists your shopping cart between page visits.
  • —hasLoggedInBefore — remembers whether to show 'Welcome' or 'Welcome back'.
  • —redcap_desc_offset — cycles product descriptions so they vary on each visit.

These are purely functional and are stored locally in your own browser. They are never transmitted to our servers and do not track you.

Stripe Cookies (strictly necessary)

When you proceed to checkout, Stripe.js sets two session cookies:

  • —__stripe_mid — identifies your browser for fraud prevention. Expires after 1 year.
  • —__stripe_sid — a short-lived session identifier, also for fraud prevention. Expires after 30 minutes.

These cookies are set by Stripe and are strictly necessary for the secure processing of your payment. They do not track you across other websites and do not require your consent under GDPR (Recital 47, ePrivacy Directive Art. 5(3)).

4. No Analytics or Tracking

We do not use Google Analytics, Meta Pixel, or any other third-party tracking or advertising technology. We do not sell, rent, or share your data with any marketing companies.

5. How We Use Your Data

  • —To provide the service: Authenticate your account, grant access to purchased products, and send you your download.
  • —To process payments: Pass a secure checkout session to Stripe. We never handle your card details directly.
  • —To respond to support requests: Reply to your messages via email.

6. Data Storage & Security

User data is stored in Google Firebase (EU — Belgium, europe-west1). Payment processing is handled by Stripe, which is PCI-DSS Level 1 certified. We apply industry-standard security practices and do not store sensitive financial information.

7. Data Retention

Account data is retained for as long as your account is active. You may request deletion at any time by contacting us. Purchase records are retained for 7 years to comply with financial record-keeping obligations under Belgian law.

8. Your Rights (GDPR)

If you are based in the European Economic Area, you have the right to:

  • —Access: Request a copy of the personal data we hold about you.
  • —Rectification: Ask us to correct inaccurate data.
  • —Erasure: Request deletion of your account and associated data.
  • —Portability: Receive your data in a structured, machine-readable format.
  • —Objection: Object to processing of your data in certain circumstances.

To exercise any of these rights, email us at mocc@theredcapsim.com.

9. Third-Party Services

  • —Firebase (Google): Authentication and database. Privacy policy: firebase.google.com/support/privacy
  • —Stripe: Payment processing. Privacy policy: stripe.com/privacy

10. Changes to This Policy

We may update this policy from time to time. The 'Last updated' date at the top of this page will always reflect the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, contact us at: mocc@theredcapsim.com