YOUR GAME.
YOUR INFORMATION.

1. Who is responsible?

The controller for the processing described in this policy is:

Tastan Film Produktion
Holzgasse 20
5242 Birr
Switzerland
hello@skydrifty.com
Swiss UID: CHE-294.176.564

Contact us at the email address above for any privacy question or request.

2. Information in the Skydrifty app

The app stores your callsign, selected pilot and aircraft, unlocks, upgrades, paints, earned currency, race and lap records, progression, tutorial state, and control/audio preferences locally. Local storage also supports recovery and replay. These files allow play without a cloud connection. Information included in an optional cloud save is described below.

You can use a callsign instead of your real name. If you connect a Skydrifty account with Sign in with Apple, Apple and our Supabase authentication service process the identity and sign-in information needed to establish the account. This can include your account identifier, email or Apple relay address, any name Apple supplies, authentication sessions and provider credentials. Server-held Apple credentials support account verification and revocation; credentials retained for that purpose are stored encrypted. Connecting Game Center can associate its verified player identifier with that account.

Motion controls

If you enable Tilt Steering, the app uses the device’s motion sensors to control your aircraft. These readings are processed on the device during play and are not sent to us. Turn Tilt Steering off in Settings to stop using that control option.

Services and permissions

When you use cloud-save features, a copy of supported career data is sent to Supabase, associated with your account. It includes the callsign, progression, earned currency, owned or selected game content and records included in the career snapshot, together with a device-generated writer identifier, app build, revision and update metadata used to resolve changes safely. Purchased balances and paid entitlements are managed separately through verified purchase records; a cloud-save file does not establish ownership of a paid purchase. Motion controls remain on-device. The app does not use advertising or third-party analytics SDKs, or collect your location, contacts, camera images or microphone recordings for these features.

Optional Game Center

Apple handles Game Center sign-in. The app uses player identifiers, display names, authentication status and applicable restrictions for gaming features. When you use supported leaderboards or achievements, scores, race records and achievement progress can be sent to Apple. Online friend races exchange player identity, race setup, inputs, race state and results with the other participants through Game Center. Local race and Cup recovery records may be kept to recover interrupted sessions. If you link Game Center to your Skydrifty account, our backend verifies Apple identity evidence and stores the verified association; a nickname alone does not establish account ownership.

For purchases and subscriptions, Apple handles checkout and payment details. Our backend receives and verifies Apple transaction information, including product and transaction identifiers, an account-binding token, purchase and renewal information, signed verification evidence, and refund or revocation status. We keep purchase, delivery, balance, item-use and entitlement records to supply purchases once, restore eligible rights, manage subscriptions and reconcile refunds. We do not receive your payment-card number. Game Center does not itself back up your career; Skydrifty cloud progress is a separate account feature.

Apple may separately process App Store, operating-system diagnostics, and device-backup information according to your Apple settings and its own privacy notices. See Apple’s Privacy Policy. We will update this policy before introducing features that change the app’s data practices.

3. Website visits

Your browser sends technical information such as your IP address, requested page and request headers to Railway so it can deliver and secure this website. We count page loads per day and page without visitor IDs, advertising cookies or a browsing profile. These are approximate page-view counts, not unique people.

The public website uses no advertising pixels or analytics cookies. The protected admin area uses an essential, secure session cookie that expires after 12 hours. Temporary, hashed network identifiers help limit abusive sign-up and login attempts and are held only in server memory for the rate-limit window (normally 15 minutes, or one hour for uploads). They are not linked to waitlist records. Media is normally hosted with the website; if an editor uses an external media URL, your browser connects to that media host to display it.

3a. Launch waitlist

If you join the waitlist, we store your email address, your selected platform (iOS, Android or both), the time of your registration, the consent wording version, and whether we have contacted you. We use this information to manage platform interest and send the Skydrifty launch updates you requested. Registration is voluntary, based on your consent, and does not create a game account or guarantee release or beta access. Email addresses are not automatically verified. We do not sell the list or use it for unrelated marketing.

The list is stored in our private database on Railway in the United States and is accessible only to authorised administrators. No email marketing service is currently connected and the form does not send automatic emails. You can withdraw consent, correct your platform choice or request deletion by emailing hello@skydrifty.com. We retain a registration for at most 24 months, or until you ask us to remove it, whichever comes first. Aggregate daily page counts are retained for up to 13 months. Content backups exported by the operator must also be handled securely and removed when no longer needed.

4. Support messages

If you email us, we receive your email address, the content of your message, and any attachments you choose to include. We use them to answer your enquiry, investigate the reported issue, and document its resolution. A bug report may include your device model, software version, and gameplay details if you provide them.

Please send only information needed for your request. We do not add support contacts to a marketing mailing list.

5. Service providers and international transfers

The website is hosted by Railway Corporation in the United States. Railway and its infrastructure providers process technical request data to deliver and protect the service. Railway’s Data Processing Addendum describes its international-transfer safeguards, including standard contractual clauses where applicable, and its Privacy Policy describes processing for its own service operations.

Our email service provider processes messages so we can receive and respond to your enquiries. Information may also be disclosed to professional advisers or authorities where necessary to comply with legal obligations or handle a legal claim. We do not sell your personal information or share it for targeted advertising.

Supabase provides the game account, database and backend-function services. Apple provides Sign in with Apple, Game Center and App Store services. These providers process account, gameplay or transaction information relevant to the services you use; network requests also involve technical connection information. Website and game services can involve processing outside Switzerland, including in the United States. Applicable provider agreements govern processing and transfer safeguards. Contact us for information about safeguards relevant to your data.

6. Why we process information

We process information to provide the game and website, respond to support requests, maintain security, and meet legal obligations. Swiss data protection law applies. Where the GDPR applies, the relevant bases are providing requested contractual services, legitimate interests in reliable support and secure operation, compliance with legal obligations, and consent where a feature requires it. You may withdraw consent for future processing where consent is the basis.

7. How long information is kept

• Local game data: remains in the app until you reset progress or remove the app and its data. The game keeps a local recovery copy alongside the save. Device or iCloud backups, if enabled by you, follow your Apple backup settings. Cloud career data is retained while needed for the account and cloud service, unless removed through the available deletion process. Account deletion removes linked career, wallet, item and cosmetic data; limited financial/refund evidence, security records and deletion-operation records are retained for reconciliation, preventing duplicate grants or re-creation, and applicable legal obligations. We do not promise immediate removal of every transaction or deletion record. Contact us about the retention applicable to your request.
• Motion readings: used during play; not retained by us as a motion history.
• Support messages: kept for as long as necessary to resolve and follow up on the request, document its handling, or meet applicable legal retention and claims obligations. Data is deleted or anonymised when those purposes no longer apply.
• Hosting records: Railway handles infrastructure records under its retention practices. Our site separately keeps only aggregate page counts as described above; waitlist records have a maximum retention of 24 months.

8. Your choices and rights

Depending on the law that applies, you may request access to your personal information, correction, deletion, restriction, portability, or object to processing. You may also withdraw consent where applicable. Email hello@skydrifty.com with enough information to identify your request. We may ask for proportionate verification before disclosing or changing personal information.

Local reset, cloud-save removal and Skydrifty account deletion are different actions. In Accounts & Connections, use DELETE SKYDRIFTY ACCOUNT for a connected account and follow any displayed completion or recovery steps. This does not delete your Apple Account or Game Center profile, remove Apple-held leaderboard records, or cancel an App Store subscription. A server deletion request does not remotely erase a save that exists only on your device. See Your Data Choices.

You may contact the Swiss Federal Data Protection and Information Commissioner, or another supervisory authority competent for your situation.

9. Younger players

The app has no public chat. Optional account, Game Center and purchase features are subject to Apple restrictions and applicable parental controls. Parents and guardians can contact us about a child’s account, gameplay or support information. Consult the official App Store listing for the game’s age rating.

10. Updates and contact

We will update this page when data practices change and identify the effective date. For significant changes that require notice or consent, we will provide that before the relevant processing begins. For questions, contact hello@skydrifty.com.