Privacy Policy
This Privacy Policy explains how StreamingATC.live, RadarController streams, and the Mode-S companion app handle personal data. It is written for UK users and is intended to describe, in plain language, what the website and app do, what they do not do, and how connected platform data is used.
Replace this address before publishing if you use a different mailbox.
1. Who this policy applies to
This policy applies to the StreamingATC.live website, the Mode-S companion app, and related RadarController-branded streaming integrations. In this policy, we, us, and our mean the operator of those services.
It covers personal data we process directly. It does not replace the privacy policies of third-party services you choose to connect, such as Google, YouTube, Twitch, TikTok, Discord, OBS, VATSIM, or your web host.
2. What personal data we collect
We aim to keep data collection minimal. In most cases, the website is informational and the app runs locally on your own computer.
- Website usage data: standard server or hosting logs such as IP address, browser type, referring page, and request time.
- App configuration data: local settings you save in the Mode-S app, such as integration preferences, selected accounts, overlay choices, and service state.
- Authentication data: when you choose to connect a service, we may receive access tokens, refresh tokens, account identifiers, channel identifiers, and basic profile details needed to complete sign-in and run the feature you requested.
- Operational data: local logs, integration status, and error messages used to diagnose connection or service issues.
- Support data: any information you choose to send to us in emails, issue reports, Discord messages, or similar support channels.
We do not currently state that the website uses advertising trackers, sells personal data, or runs broad behavioural analytics. If that changes, this policy should be updated before the change goes live.
3. Google and YouTube data
If you choose to sign in with Google or connect a YouTube account, we access only the Google user data needed to authenticate you and enable the YouTube features you actively choose to use.
- We use Google account data only to provide the requested app functionality.
- We do not sell Google user data.
- We do not use Google user data for advertising.
- Any Google access token or refresh token should be stored only as needed to keep the authorised connection working.
- You can revoke Google access through your Google account permissions or by disconnecting the integration in the app.
Your use of Google and YouTube features is also subject to Google's own terms, policies, and security controls.
4. How we use personal data
- to provide the website and app features you request;
- to authenticate linked accounts and maintain active integrations;
- to store your local app preferences and service configuration;
- to monitor reliability, investigate faults, and improve stability;
- to protect the service, prevent misuse, and maintain security; and
- to comply with legal or regulatory obligations where applicable.
5. Our legal bases under UK GDPR
- Contract: where processing is needed to provide a feature or service you asked to use.
- Legitimate interests: where processing is needed to run, secure, support, and improve the website or app in a proportionate way.
- Consent: where you choose to link an external account or otherwise give optional permission.
- Legal obligation: where we must retain or disclose information to comply with the law.
6. Where data is stored
The Mode-S app is designed primarily as a local desktop application. That means much of the data it uses, including saved settings, tokens, and logs, may be stored on the device where you run it. Website content may be hosted by a third-party hosting provider, which may also keep routine access logs.
7. Who we share data with
We share data only where that is necessary to provide the service or where you choose to connect a platform.
- Connected platforms: for example Google, YouTube, Twitch, TikTok, Discord, OBS, or VATSIM, where the app must exchange data to deliver the feature you enabled.
- Hosting or infrastructure providers: where needed to host the website or maintain service availability.
- Professional advisers or authorities: where reasonably necessary for legal compliance or the defence of claims.
We do not sell personal data to data brokers or advertisers.
8. International transfers
Some third-party services you choose to connect may process personal data outside the UK. Where that happens, those providers are responsible for their own transfer mechanisms and safeguards. By connecting those services, you understand that your data may be processed according to their own privacy terms and geographic hosting model.
9. Retention
- Local app data: usually retained until you delete it, disconnect the integration, reinstall the app, or clear the relevant files.
- Website/server logs: retained only for as long as reasonably needed for security, diagnostics, and hosting operations.
- Support correspondence: retained for as long as needed to resolve the issue and keep a reasonable support record.
10. Security
We take reasonable technical and organisational measures to protect personal data, including limiting data use to what is needed for the service, storing as much as possible locally, and using platform authentication flows rather than asking for your third-party passwords directly. No internet or software system can be guaranteed to be completely secure, so you should also secure your own device, accounts, and backups.
11. Your rights
Under UK data protection law, you may have rights including:
- the right to be informed;
- the right of access;
- the right to rectification;
- the right to erasure;
- the right to restrict processing;
- the right to data portability;
- the right to object; and
- rights in relation to automated decision-making, where applicable.
To exercise those rights, contact privacy@streamingatc.live. You also have the right to complain to the Information Commissioner's Office if you believe your data has been handled unlawfully.
12. Children
The service is not intentionally designed to collect personal data from children. If you believe a child has provided personal data to us inappropriately, contact us and we will review the position.
13. Changes to this policy
We may update this policy from time to time to reflect changes to the website, app features, connected services, or legal requirements. The latest version should always be published on this page with a revised update date.