Privacy Policy
TOGA Academy · togaacademy.com · Last updated: October 13, 2026 · Versão em português
Summary: the MCDU Trainer works without an account. If you subscribe, we keep only what your account needs. Card details stay with Stripe, never with us. Marketing emails and the Meta Pixel in Europe are opt-in, and you can change your mind at any time.
1. Who is responsible
This site is run by Rafael Hidd Germenink, an individual based in Brazil, who is the data controller for the purposes of the Brazilian General Data Protection Law (LGPD) and, for visitors in the European Economic Area and the United Kingdom, the GDPR. Contact: contato@togaacademy.com.
2. What the trainers keep
The trainers run in your browser. What you type or click in them is not sent to our server, except the optional email sign-up described in section 4. Your browser's local storage keeps your language, whether you closed the welcome message and the cookie notice, and the MCDU scenarios you have completed. You can erase this at any time by clearing the site data in your browser.
3. Account and payments
When you create an account we store your name, email, your password in encrypted form (it cannot be read), the modules unlocked, your last sign-in date and your subscription status. A session cookie keeps you signed in. Payments are processed by Stripe, which receives your card details directly; we only receive the payment confirmation and the subscription ID. See the Stripe privacy policy. Legal basis: performance of the contract.
4. Email sign-up on the MCDU Trainer
Signing up is optional. If you leave your email to unlock the extra scenarios, we keep the email, your language, the sign-up date, the scenarios you completed (time and number of errors) and whether you confirmed the email. We use it to unlock the scenarios, restore your progress on another device and send the confirmation email (legal basis: our legitimate interest in providing the feature you asked for).
Marketing emails (news, study tips and offers) are only sent if you tick the consent box, which starts unticked (legal basis: consent). We keep the date, the wording and version of the consent and the IP address it was given from, as proof. Every marketing email has an unsubscribe link.
5. Flight schools contact form
If you use the form on /schools/, we receive your name, school, country, number of students, email and message, and use them only to answer you about group licenses.
6. Cookies and similar technologies
| What | Why | When |
|---|---|---|
| Session cookie (toga_sess) | Keeps you signed in | Always (essential) |
| Language cookie (toga_lang) and local storage | Remembers your language, progress and choices | Always (essential) |
| Meta Pixel (Facebook and Instagram) | Measures the results of our ads: page visits, email sign-ups, contact requests and checkout starts. Your email is not sent to Meta. | In Europe, only after you click “Accept” on the cookie notice. Elsewhere, on by default. |
| Google AdSense (free MCDU Trainer page) | Shows ads that keep the MCDU Trainer free | On the free MCDU Trainer page |
If you are in Europe, you can change your choice at any time with “Cookie settings” at the bottom of each page. Everyone can limit Meta ads in the Meta ad preferences and Google ads in the Google ad settings. Learn more in the Meta privacy policy and in how Google uses cookies in advertising.
7. Server logs
Our hosting provider may automatically log technical data about visits, such as IP address, date and time, browser and page visited. These logs are used for security and to keep the site running (legal basis: legitimate interest).
8. Where the data is stored
The site is hosted by a commercial hosting provider, and payments go through Stripe. Their servers may be in a country other than yours. We only share data with these providers to run the service, and we do not sell personal data.
9. How long we keep it
Account data is kept while your account exists. Email sign-ups are kept until you ask us to delete them. Proof of marketing consent is kept while it is needed to show that it was given.
10. Your rights
You can ask for access to, correction, deletion or a copy of your personal data, object to its use, or withdraw a consent at any time. Write to contato@togaacademy.com. If you are in the EEA or the UK, you can also complain to your local data protection authority.
11. Children
The content is meant for adult pilots and aviation students and is not intended for children under 16.
12. Changes
We may update this policy. The date of the last update appears at the top of the page.