Privacy Policy — PlaneFlow
Last updated: 7 August 2026
PlaneFlow (“the game”, “we”) is a casual air-traffic-control game. This policy explains what data the game handles and how. We keep it minimal on purpose: the game asks for no personal information and there is no sign-up, no password and no account you have to create. On Android, the game optionally lets you sign in with Google Play Games to use achievements and leaderboards — that part is described below and is entirely optional. If you post a score to our own Survival leaderboard in the Android app, the nickname you choose and a random player id are stored on our server so the board can show your result; you can have those deleted at any time. The only personal data we ever handle is an email address you enter yourself if you choose to join our optional notification list (see Email notifications below).
What we store
The game stores the following locally on your device (in the browser/app storage), so your progress and preferences persist between sessions:
- Game progress & settings — unlocked levels, stars, best results, chosen language, sound/vibration and visual-theme preferences.
- Anonymous gameplay analytics — a randomly generated identifier (not linked to you or any account), session timing, and in-game events such as level start/finish, tutorial steps, settings changes, and error/crash details. Alongside each event we store basic technical context: app version, interface language, platform, and screen size. On the web this stays on your device; in the Android app, once you consent, it is also sent to Firebase (see below).
Google Play Games (Android, optional)
The Android version of PlaneFlow offers an optional sign-in with Google Play Games so you can earn achievements and post Survival scores to leaderboards. This feature is provided by Google. It is off until you choose to sign in, and you can play the entire game without it. The web version does not use Google Play Games at all.
When you sign in, Google provides the game with your Play Games player ID and your Play Games display name (gamer tag) and avatar, and the game sends your achievement progress and leaderboard scores to Google Play Games Services. Your gamer tag and scores are stored on Google’s servers and can be visible to other players on the leaderboards you take part in. We use this data only to run achievements and leaderboards — we do not use it for advertising and we do not sell it.
This Play Games data is collected and processed by Google under Google’s Privacy Policy, and you control it through your Google account and your Play Games settings (including your gamer-tag visibility and deleting your Play Games data). If you never sign in, no Play Games data leaves your device.
Survival leaderboard — our own server (Android app)
The Android app has a global Survival leaderboard that we run ourselves, on our
own server, separate from Google Play Games. When your Survival run ends and the result is posted
to that board, the game sends the following to our server at
api.planeflow.jevgenia.com:
- Your nickname — the name you typed for the leaderboard. It is shown publicly next to your score, so please don’t use your real name if you’d rather not be recognised. You can change it, and you can have it deleted (see below).
- A random player id — a string the game generates on your device the first time it needs one. It is not your Google account, not your email, and not derived from your device’s hardware; it exists so the board can tell that two results belong to the same player (your personal best, your position, and so that nobody can post scores under your name).
- Your score and how long the run lasted, and the time it was recorded.
That is the whole list — no contacts, no location, no device identifiers. We use it only to build the leaderboard. It is not shared with third parties, not used for advertising, and never sold. The web version of the game does not send scores to this leaderboard.
Where it is stored. On a virtual server we rent and administer ourselves from Contabo, located in a data centre in France — so this data is stored in the European Union and does not leave it. It is not handed to a third-party analytics or game-backend service: it sits in a single database file on that server, and travels there over HTTPS.
How long it is kept. Your nickname and player id are kept for as long as you are on the board — until you ask us to delete them. Individual run records are deleted automatically after about 90 days; weekly, monthly and seasonal placings drop off automatically once the period is well past. Your all-time best stays until it is deleted.
Deleting it. The game can ask our server to erase everything it holds about you — nickname, player id, and every recorded run — and this removes you from the leaderboard. You can also write to planeflow@jevgenia.com and we will do it. Note that if you keep playing afterwards and post a new score, a new entry is created in the same way as the first time.
App updates (Android app)
The Android app can update the game itself without going through the store. To do that it
periodically asks our server at capgo.jevgenia.com whether a newer version exists.
This is part of how the app works, so it happens whatever you choose on the analytics consent
screen — but it is not analytics, and it carries nothing about how you play.
The check sends the app and content version it currently has, the app’s package name, your Android version, whether the build is a release build, and a random identifier generated by the update component (again: not your account, not a hardware or advertising id, and reset if you reinstall the app). This is the same server in France described above; it reads only the version in order to decide whether to offer an update, does not store the rest, and our web-server logs are configured not to record visitors’ IP addresses.
Analytics & diagnostics — Firebase (Android app, with your consent)
The Android app uses Google’s Firebase for anonymous analytics (Google Analytics for Firebase), crash reporting (Crashlytics) and performance monitoring (Performance Monitoring). This collection is off by default and starts only after you agree on the consent screen; if you decline, nothing is sent. The web version does not use Firebase.
When enabled, Firebase collects the anonymous gameplay events and technical context described above, crash and performance diagnostics, a Firebase installation identifier, and — for analytics attribution — your device’s advertising ID. This data is not linked to your identity, is used only to understand aggregate usage and fix problems, is not shared with third parties for their own purposes, and is never sold. It is processed by Google under Google’s Privacy Policy. You can stop it at any time by declining consent or clearing the app’s data. No ads are shown in the game.
Email notifications — waitlist
On our sign-up page you can voluntarily give us your email address so we can let you know when PlaneFlow’s open test and full launch go live. This is entirely separate from the game itself: you never need an email address to play, and the game does not ask for one.
- Who runs the list — the notification list is operated by the PlaneFlow project (the game’s developer), reachable at planeflow@jevgenia.com.
- What we collect — only your email address, the time you signed up, which version of the consent text you agreed to, and — if present in the sign-up link — a utm campaign tag showing where you came from. We do not ask for your name or anything else. Alongside this, the form keeps a short-lived anti-spam counter (kept for about an hour, then deleted) tied to the IP address the request came from, so that one sender cannot flood the list; it is never used to identify you or linked to your address.
- Double opt-in — after you submit the form we email you a confirmation link; your address is only added to the active notification list once you click it. This keeps the list accurate and confirms it was really you.
- Why — solely to send you notifications about PlaneFlow’s testing phases and its launch. We do not use your address for any other purpose, and we never sell it or share it for anyone else’s marketing.
- How it is processed — the sign-up form runs on Cloudflare Workers (serverless code we wrote), with your entry stored in a Cloudflare D1 database restricted to Cloudflare’s EU jurisdiction, so this data is kept on servers in the EU. The confirmation and notification emails themselves are sent on our behalf by Brevo (Sendinblue SAS) purely as a transactional email relay (it does not host the waitlist), under its own privacy policy. The form is also protected by Cloudflare Turnstile, a cookieless bot check that briefly sees your IP address to confirm you’re not a bot — it does not track you.
- Removing your address — you can unsubscribe at any time by writing to planeflow@jevgenia.com; we will delete your address from the list on request.
- Retention — we keep your address only until you withdraw consent (unsubscribe or ask us to remove it) or until the PlaneFlow notification programme ends, whichever comes first — after which it is deleted. Sign-ups that never confirm are deleted automatically after a few days.
What we do NOT collect
- Inside the game: no real name, email, phone number, or any data that identifies you personally (your Play Games gamer tag is a public alias you choose in Google Play Games, not collected by us as your identity; the leaderboard nickname is likewise an alias you pick yourself, and you decide what to put there). The only personal data we ever collect is the email address you give us if you join the optional notification list described above.
- No precise location, contacts, photos, microphone or camera access.
- No ads are shown in the game, and we never sell your data to anyone.
Where the data goes
Your game progress and settings stay on your device: the saved game itself is never uploaded to us. Data that leaves your device is limited to: (1) the Google Play Games information above, only if you sign in; (2) in the Android app, your leaderboard nickname, random player id and Survival results, sent to our own server when a score is posted to the Survival board; (3) in the Android app, the version check our update server needs; (4) in the Android app, the Firebase analytics and diagnostics described above, only after you consent; and (5) the email address you submit to our notification list, only if you sign up (processed by Cloudflare and Brevo, as described above). On the web, analytics stay on your device. We use analytics only to improve the game and to understand aggregate, anonymous usage (for example, how many players complete the tutorial). We never sell your data.
Everything we store ourselves is stored in the European Union. That means both places where we — rather than a big platform — keep data: our own server in France (the Survival leaderboard), and the waitlist database, which runs on Cloudflare D1 restricted to Cloudflare’s EU jurisdiction. Neither leaves the EU.
Two things are not covered by that sentence, and we would rather say so plainly than imply otherwise: data you send to Google — Play Games sign-in data if you use it, and Firebase analytics if you consent to it — is handled by Google on its own infrastructure under Google’s Privacy Policy, which is not limited to the EU; and confirmation emails are delivered through Brevo, as described above.
Children
PlaneFlow is suitable for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children.
Data retention & your control
Because the on-device data is stored on your device, you can erase all of it at any time by clearing the app’s data/storage or uninstalling the game. If you signed in with Google Play Games, your achievements and leaderboard scores live in Google Play Games; you can manage or delete them through your Play Games settings. There is still no PlaneFlow account with a password to close — but if you have posted to our Survival leaderboard, we do hold your nickname, random player id and results on our server, and you can have all of it deleted: see that section above, or write to planeflow@jevgenia.com. If you joined the email notification list, you can remove your address at any time — see Email notifications above.
Security
The game is served over HTTPS. Any data transmitted off your device — Google Play Games sign-in data, your leaderboard entry and version checks on our own servers, and the Firebase analytics/diagnostics above — is sent over encrypted connections. Scores are accepted only with a key the game holds for your own player id, so nobody can post results, or request deletion, under someone else’s name.
Changes to this policy
If this policy changes, we will update the “Last updated” date above and, where required, the Google Play listing.
Contact
Questions about this policy: planeflow@jevgenia.com