Privacy PolicyL3DRM Add-on Activation & LAND3 Simulations Developer Portal  ·  Last updated: 2026-09-23  ·  Effective: 2026-09-23

This Privacy Policy explains what personal data we process when you activate or use a flight simulator add-on that contains the L3DRM activation module, or when you use the LAND3 Simulations developer portal, why we process it, on what legal basis, with whom we share it, how long we keep it, and which rights you have. A German version is available at /datenschutz.

1. Controller

Simulatortechnik Reinemuth
George-Washington-Str. 221
68309 Mannheim
Germany

E-Mail: contact@land3simulations.com

We are the controller for the processing described here, including for add-ons published by other developers that use L3DRM. Data subject requests (access, deletion, objection, etc.) should be sent to the same address.

2. Data We Process

We process the following categories of personal data:

  • Activation data (L3DRM): your flight simulator user name as reported by the simulator, the platform (activation key, PC store or Xbox), the simulator version, the activation key you enter, the add-on and its version, the version of the L3DRM module, and the times of activations, license checks and user changes on an activation key.
  • Session data (L3DRM): start and end time of each flight session with the add-on, the result of the license check, and a session identifier.
  • Integrity data (L3DRM): checksums (hashes) of the add-on's own program files, and integrity or tamper event codes with their time and the user name, activation key and session they relate to. We do not read or transmit any other files on your computer or console.
  • Data stored on your device (L3DRM): the add-on stores your activation key and your acceptance of its license terms in the add-on's own folder inside the simulator. These files are not transmitted except as described above.
  • Account data (developer portal): email address, hashed password, role and permission assignments, session tokens, and the version and time at which you accepted the portal terms of use.
  • Server logs: IP address, timestamp, requested URL, HTTP status, user agent – logged by our hosting and backend providers for security and abuse prevention. We do not store IP addresses in our license database.

3. Purposes and Legal Basis

  • Add-on activation and license validation (checking that a copy is licensed, enforcing activation limits, restoring access after a reinstall) – our legitimate interest and that of the add-on developer in protecting licensed software against unlicensed use (GDPR Art. 6(1)(f)); where you acquired the add-on under a license that requires activation, also the performance of that license (GDPR Art. 6(1)(b)). An add-on protected by L3DRM cannot be activated without this processing.
  • Integrity checks and abuse prevention – legitimate interest in protecting the add-on and our service against manipulation and circumvention (GDPR Art. 6(1)(f)).
  • Support by the add-on developer – the developer of an add-on can see the activation, session and integrity data of its own add-on in the developer portal to handle your support requests, key resets and abuse cases (GDPR Art. 6(1)(f)).
  • Account authentication for the developer portal – performance of contract (GDPR Art. 6(1)(b)).
  • Records of accepted portal terms of use – legitimate interest in being able to prove the agreement (GDPR Art. 6(1)(f)).
  • Server logs – legitimate interest in operating and securing our infrastructure (GDPR Art. 6(1)(f)).

4. Recipients and Processors

Add-on developers: the developer of the add-on you activate receives access to the data listed in Section 2 that relates to its own add-on, and only for license support and abuse prevention. Developers cannot see data about other developers' add-ons.

We use the following processors. Data processing agreements under GDPR Art. 28 are in place with each.

  • Supabase Inc. (USA, processing in EU region) – database, authentication and backend functions for the license service and the developer portal. Transfers to the USA are protected by the EU Standard Contractual Clauses.
  • Google LLC (USA; Firebase Hosting) – hosting of the developer portal website. Transfers to the USA are protected by the EU Standard Contractual Clauses.
  • Cloudflare, Inc. (USA) – bot protection (Turnstile) on the developer portal login. Transfers to the USA are protected by the EU Standard Contractual Clauses.

We do not sell personal data and do not share it with advertisers.

5. International Transfers

Where data is transferred outside the European Economic Area (in particular to the United States), the transfer is protected by the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, supplementary measures.

6. Retention

  • Activation and session data: for the duration of the license and up to 24 months thereafter for fraud and abuse investigation.
  • Integrity and tamper events: up to 12 months.
  • Account data (developer portal): for the lifetime of the account; deleted within 90 days of account closure. Records of accepted terms of use are kept for as long as claims under those terms can be asserted.
  • Server logs: up to 30 days for security, longer if needed to investigate a specific incident.

7. Your Rights (GDPR, EU / EEA / UK)

You have the right to:

  • access your personal data (Art. 15);
  • rectify inaccurate data (Art. 16);
  • erase your data (Art. 17), subject to legal retention duties;
  • restrict processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on legitimate interest (Art. 21);
  • lodge a complaint with a supervisory authority. The competent authority for our location is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg. UK users may complain to the Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at the contact address in Section 1. For add-on data, please include your simulator user name and the name of the add-on, because that is how the data is identified. If activation data is erased or you object to its processing, the add-on may need to be activated again or may no longer be usable.

8. California Residents (CalOPPA and CCPA / CPRA)

California residents may contact us at the contact address in Section 1 to exercise any rights granted by California law, including the right to know what personal information we collect, the right to delete, the right to correct, and the right to opt out of any sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.

Our processing is limited to the purposes described in Section 3.

9. Other Jurisdictions

Residents of Brazil (LGPD), Canada (PIPEDA), Australia, Quebec (Law 25), or other jurisdictions with comparable laws may have additional rights regarding their personal data. Contact us at the contact address in Section 1 to exercise them.

10. Cookies, Local Storage and Tracking

The L3DRM activation module uses no cookies, analytics, advertising or tracking. The developer portal uses only strictly necessary local storage and cookies: the Supabase authentication session token, and the Cloudflare Turnstile bot-protection token. These are required for the site to function and do not require consent.

11. Security

Communication with our servers is encrypted in transit (HTTPS / TLS); activation requests are additionally encrypted and license responses are digitally signed. Passwords are stored hashed. Access to backend systems is restricted to authorized personnel.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be published on this page with an updated "Last updated" date and, where applicable, notified by email.