Privacy Policy
The rules of the game are set out in the Terms of Service. This policy explains what data we collect in AeroTycoon, why, who we share it with and what your rights are. The game shows no ads, uses no analytics or tracking tools and does not sell data.
1. Data controller
The controller of your personal data is VXN Marcin Gański, ul. Myśliwska 33F lok. 125, 80-283 Gdańsk, Poland, tax ID (NIP) 589-188-66-04, REGON 221944780. For any privacy matters, write to support@aerotycoon.pl.
2. What data we process
| Data | Source | Purpose |
|---|---|---|
| Email address, password (stored only as a cryptographic hash), language, chosen avatar, registration and last sign-in dates | You provide them at sign-up; dates are recorded by the server | Account, sign-in, password reset, account messages |
| Game data: airline name, fleet, routes, finances, progress, settings | Created while you play | Running the game |
| Alliance chat messages | You write them in the game | Communication with alliance members – all members can see them |
| In-game purchase history: product, transaction ID, date, number of points | App Store / Google Play via RevenueCat | Granting purchased points and services, accounting, complaints |
| Device token for push notifications | Your phone, if you allow notifications | Notifications about game events |
| IP address | Every connection to the server | Abuse protection (request rate limits). We do not store it in the database |
Your airline name and game results are visible to other players (e.g. on the map, in alliances, on the stock market and in rankings). Do not put personal data in it.
We never see your card or other payment details – payments are handled by Apple and Google.
3. Legal bases
- performance of the contract to use the game – account, gameplay, purchases (Art. 6(1)(b) GDPR);
- legitimate interest – server security, abuse prevention, handling complaints (Art. 6(1)(f) GDPR);
- legal obligation – keeping accounting records (Art. 6(1)(c) GDPR);
- consent – push notifications; you can withdraw it in your phone settings (Art. 6(1)(a) GDPR).
4. Who we share data with
We use service providers that process data on our behalf and only for the purposes above:
- OVH Sp. z o.o., ul. Powstańców Śląskich 9, 53-332 Wrocław, tax ID (NIP) 899-252-05-56 (Poland) – game server and database;
- home.pl S.A. (Poland) – sending emails (password reset codes, account deletion confirmation);
- RevenueCat, Inc. (USA) – in-app purchase processing. RevenueCat receives a random identifier of your account (containing no personal data) together with transaction data. For purchases made before 15 October 2026 the identifier was your email address;
- Apple Inc. and Google LLC – app stores and payments, and delivery of push notifications (Apple Push Notification service, Firebase Cloud Messaging);
- OpenStreetMap Foundation (United Kingdom) – the in-game map. Your phone downloads map images directly from its servers, which see your IP address.
Transfers to the USA rely on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework where the recipient participates in it. The United Kingdom is covered by a European Commission adequacy decision.
5. How long we keep data
- Account and game data – until you delete your account.
- Database backups – up to 14 days; data of a deleted account disappears from backups within that time.
- Server error logs – up to 30 days.
- An app session expires 30 days after sign-in; a password reset code is valid for 30 minutes.
- Purchase transaction IDs (without your email or other personal data) – for the period required by accounting and tax law.
- Data held by RevenueCat – under RevenueCat's policy; on request we will delete it there too.
6. Deleting your account
You can delete your account in the app: Settings → Delete account (password required). We then permanently delete the account, your email address, your airline with all game data and your alliance chat messages, and send a final confirmation to your address. Deleting the account does not cancel subscriptions – do that in App Store or Google Play settings. Unused premium points are lost. If you no longer have access to the app, write to the address in section 1.
7. Your rights
You have the right to access your data, rectify it, erase it, restrict processing, data portability, and to object to processing based on legitimate interest. You can withdraw consent to notifications at any time without affecting earlier processing. To exercise your rights, write to the address in section 1. You may also lodge a complaint with a supervisory authority – in Poland the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) – or the authority in your country of residence.
Providing an email address and password is voluntary, but an account cannot be created without them. We make no decisions based solely on automated processing that would have legal effects on you.
8. Security
Connections to the server are encrypted (HTTPS). Passwords and session tokens are stored only as cryptographic hashes, and password reset codes are single-use and time-limited.
9. Children
The game is intended for people aged 16 or over. Younger people may use the game only with the consent of a parent or guardian.
10. Changes to this policy
We will announce material changes in the app. The current version is always available at this address.