Last updated
That company is the data controller for everything described below.
Analytics never receives the simulator’s own URL parameters. A shared engine link carries your whole build in the query string; we send the page path and standard UTM tags, nothing else. There is no session recording and no heatmap on this site.
There are no adverts on this site and no advertising cookies. Nothing here follows you to another site or builds a profile for anyone to sell. What is left is analytics, and your browser’s memory of what you were doing.
Google Analytics and PostHog each store an identifier to tell a returning visit from a new one. We switch off Google Signals and ad-personalisation signals, so Google cannot use analytics from this site to build advertising audiences. Block every cookie and you lose the saved build and nothing else. The simulator needs none of them to run. When you sign in, this browser’s analytics history is linked to your account id so we can see what signed-in people use; it is never linked to your email address.
We send two kinds. Service emails keep your account working: the sign-in link or code, replies to what you write to us, and a personal request for your feedback, for example after you cancel a subscription. You get these for as long as you have an account and use the site; there is no opting out of them.
Marketing emails. If you have signed in, we may email you about the simulator: new releases, discounts and the like. Every one carries an unsubscribe link, and one click ends them; you can also opt out by writing to us. Opting out never affects the service emails or your account. To choose who gets which, our mailing list holds your plan, whether a subscription is active or set to end, its length and renewal date, and when you last visited.
These providers process data on our instructions, under contract. None may sell it, and we do not sell it either.
Submitting the feedback form attaches the email address you gave to that browser’s analytics history, so we can match your report to the session it describes. Write to us by email instead if you would rather we did not. We also disclose data where the law requires it.
Those providers process data in the European Union and the United States. Where personal data leaves the EEA it moves under the European Commission’s Standard Contractual Clauses or an adequacy decision.
You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, restrict or object to how we use it, or ask for it in a portable form. Where we rely on consent you can withdraw it at any time, and you can object to our emails at any time: the link in each one does it. Email hello@realenginesimulator.com and say what you want, including deleting your account and every engine in it. We answer within a month, and a person reads it. If you think we have got it wrong you can complain to your data protection authority; ours is the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).
Plenty of the people reading this site are students. We do not knowingly collect personal data from children under 16, and nothing on the site asks for any. If you think a child has sent us personal data through a form, write to us and we will delete it.
The site is served over HTTPS, and submissions and saved engines are written to a database reachable only from our server-side code, with no public read access. Accounts have no password to leak: you sign in with a one-time link or through Google, and the session lives as a token in your own browser. Card details go to Polar over its own checkout page and never touch our servers.
The date at the top says when this page last changed. We announce a change that matters to what we collect or why on the site, and, if you have an account, by email before it takes effect. Questions about any of it: hello@realenginesimulator.com, or the contact page.