Privacy Policy

How we handle your information at Rocky Mountain Airlines.

Last Updated: March 2026

1. Introduction

Rocky Mountain Airlines ("RMA", "we", "us") operates the website rockymtnairlines.net. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

RMA is a virtual airline community for flight simulation enthusiasts. We are not a real-world airline and do not process travel bookings or passenger data.

2. Information We Collect

2.1 Discord OAuth Data

When you sign in through Discord OAuth on our admin panel, we receive and store:

  • Discord User ID — your unique numeric identifier
  • Username — your Discord display name
  • Avatar URL — a link to your Discord profile picture

We request only the "identify" scope. We do not access your messages, server list, friends list, email address, or any other Discord data. The access token received from Discord is immediately revoked after identifying you.

2.2 Cookies

We use the following cookies:

  • rma_theme — stores your light/dark theme preference (1-year expiry, non-essential)
  • rma.sid — session cookie for admin authentication (7-day expiry, essential for admin functions, HttpOnly)

We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

2.3 Server Logs

Our web server may log standard access information (IP address, request URL, timestamp, user agent) for operational and security purposes. These logs are not shared with third parties and are retained for a limited period.

3. How We Use Your Information

  • Discord identity data is used solely to authenticate administrators and display their name when they author news posts.
  • Theme preference cookies provide a personalized browsing experience.
  • Session cookies maintain authenticated admin sessions.

4. Data Storage & Security

Your data is stored in a local database on our server. We implement reasonable security measures including encrypted connections (HTTPS), HttpOnly session cookies, and limited data retention. No data is sold, rented, or shared with third parties.

5. Third-Party Services

We link to and integrate with the following third-party services:

  • Discord (Privacy Policy) — for OAuth authentication and community coordination
  • FlyLAT (flylat.net) — virtual airline management platform
  • Google Fonts — for web fonts (loaded from Google's CDN)

Each service has its own privacy practices. We encourage you to review their policies.

6. Your Rights

You may:

  • Clear your cookies at any time through your browser settings
  • Request removal of your Discord identity data from our admin database by contacting us on Discord
  • Revoke RMA's access to your Discord account through Discord's Settings → Authorized Apps

7. Children's Privacy

Our service follows Discord's Terms of Service regarding age requirements. We do not knowingly collect information from children under the minimum age specified by Discord.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be noted by updating the "Last Updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the updated policy.

9. Contact

For privacy questions or data removal requests, contact us through our Discord server.