Privacy Policy
Seat Airlines collects as little as it can. There are no Seat Airlines accounts, no mailing lists, no advertising trackers and no analytics scripts. This page lists everything the site does store.
Who runs the site
Seat Airlines is run from Texas, United States. For anything about your data, email mattrickbeats@gmail.com.
What we store on our server
Our server is a Cloudflare Worker with Cloudflare storage.
| What | Why | How long |
|---|---|---|
| Your public wallet address | To show that an advert, card, score or message is yours | As long as the thing it belongs to |
| Adverts you publish (image, description, link) | To show them on your seat | Until you take them down. The picture file itself is kept, because another seat may show the same picture; ask us and we will delete it |
| Your directory card and messages you send | The cabin directory and introductions | Until you ask us to remove them |
| Directory sessions, stored only as a one-way fingerprint | Keeping you signed in | 24 hours |
| Game runs: when each flight started, and a keyed hash of your IP address that cannot be turned back into it without our server’s secret | Checking scores, and limiting how many flights one connection can start in an hour | 24 hours |
| Your best score | The leaderboard | Until the board is reset |
| Every score you post, with its time | Naming the day’s top pilots | No set limit yet; ask us and we will delete them |
| Your IP address, as a count in Cloudflare’s rate limiter | Capping balance lookups and email or passkey wallet requests from one connection | One minute |
| Your flight’s share picture, or your seat’s card | So a post on X can show it | 90 days |
| Your X access token (encrypted), your X username and the times of your recent posts, if you connect X | To post your flight when you ask, at most six times an hour | Until you disconnect, or 180 days after you connect or last post |
The operator also keeps a private notebook on the server, which only the operator’s wallet can open. A note is free text the operator types, and can mention something said in a cabin room the operator’s own seat can see, and the wallet, handle or room it came from. Notes are kept until the operator deletes them, and you can ask what they say about you under Your rights.
Signatures you make are checked and then thrown away, not kept. Expired sessions and game runs are cleared the next time anyone signs in or starts a flight, so they can outlast the times above for a while.
What is public
Solana balances are public. The site shows each seated holder’s seat, rank, address and balance, and everyone can see published adverts and leaderboard scores. Each day the top five pilots are posted on our X account, by shortened wallet address and score.
Directory card names, roles and offering tags are visible to signed-in holders; contact details and links only to your own section. Any offering tags you choose also show on your public seat card, and if you turn on Show my links on my public seat card, anyone can see your display name, website, LinkedIn and social accounts there. Messages in your cabin’s room are seen by everyone in that cabin; introductions are shown only to the two of you.
We look up public wallet addresses in a community Fomo profile index to display profile pictures beside scores and on seats without an advert. These public pictures and handles may be cached for up to 30 days. Your browser loads pictures from their image hosts.
What stays in your browser
The site uses your browser’s local storage, not tracking cookies. It keeps your directory session, your X connection if you make one, which wallet you last chose, your best score, a random passenger name, sound, radio and display settings, and any adverts saved only on your device. If you use the email or passkey wallet, its kit keeps its own sign-in data in your browser too. You can clear these at any time by clearing the site’s data in your browser.
Connecting X
If you connect your X account, X shows you exactly what you are allowing. We use that access only to read your X username, upload your flight’s picture or video or your seat’s card, and publish one post, each time you press Share. We do not read your timeline, followers, messages or other X data. Disconnecting deletes the token from our server, and you can also revoke it in X under Settings → Security and account access → Apps and sessions. X’s handling of your data is covered by X’s Privacy Policy.
Other services the site talks to
- Cloudflare runs our server, which receives your IP address with each request, as any web server does. The only places our server keeps it are the game runs and the rate limiter in the table above.
- GitHub Pages hosts the site’s files.
- Google Fonts serves the typefaces.
- Audius streams the in-flight radio. Nothing is sent to it until you open the radio; then your browser fetches track lists, artwork and audio from Audius directly, so Audius receives your IP address and what you search for and play. Your volume and last channel stay in your browser. Audius’s handling of that is covered by Audius’s Privacy Policy.
- Open-Meteo provides the weather outside the window. We send it a rough location worked out from your browser’s time zone, never your real location.
- Solana RPC and market-data providers supply balances and prices.
- Helius runs the optional email or passkey wallet, which is built on Turnkey. If you use it, those two handle the email address, phone number or passkey you sign in with, and we never see it. When you create the wallet, our server passes Helius its address, its IDs and which sign-in method you used. If the wallet asks our server for chain data, such as your balance, our server forwards that read-only request, with your wallet’s address in it, to Helius.
- Your wallet extension or app handles your keys. We never see them.
We do not sell your data, and we do not share it with anyone except these providers to run the site.
Your choices
You can take down your adverts, edit your card, sign out, disconnect X and clear your browser data at any time. To ask us to delete anything else tied to your wallet, email mattrickbeats@gmail.com, or message @SEATAIRLINES on X.
Your rights
Wherever you live, you can ask us to show you, correct, delete or give you a copy of the personal data we hold that is tied to you. This covers your rights under laws such as the Texas Data Privacy and Security Act, California’s CCPA, and the EU and UK GDPR. Email mattrickbeats@gmail.com and say which wallet address or X account it is about; we may ask you to sign a message with that wallet to show it is yours. We answer within 45 days, or within one month if you are in the EU or UK.
If we decline a request, we will say why, and you can appeal by replying to our answer; we decide an appeal within 60 days. If you live in Texas and we turn down your appeal, you can complain to the Texas Attorney General. In the EU or UK, you can complain to your data protection authority at any time.
We do not sell personal data, we do not use it for targeted advertising, and we do not use it to profile you.
We use your data to run the features you ask for (a seat, an advert, a card, a score, a post on X), to keep the site and its leaderboard safe from abuse, which is our legitimate interest, and, for the X connection and the links you choose to show on your seat card, because you turned them on; you can turn them off at any time. The site is run from the United States, so your data is handled there and by the providers above.
Balances and transactions on the Solana blockchain are public, and we cannot change or delete them. Deleting what we hold removes it from the site, not from the chain.
Children
The site is not meant for anyone under 18.
Changes
If this policy changes, we will update the date at the top.