Privacy Policy
Effective [Month Day, Year]
Jet Engine Simulator is a jet-engine game you play in your browser. This policy explains what personal information it collects, why, who it is shared with, and the choices you have. The short version: we collect as little as we can, we never sell it, and there are no ads or tracking.
Who is responsible: [Your full legal name, or your business name if you register one], Alberta, Canada ("we", "us"), the operator of Jet Engine Simulator at [yourdomain.com].
Contact for anything in this policy: [support@yourdomain.com]
1. What we collect
You can play without an account. Nothing about you is sent to us until you sign in or buy something.
| Information | When | Why |
|---|---|---|
| Email address | When you sign in | To send your one-time sign-in codes and purchase receipts, and to identify your account. Never shown to other players. |
| Username | When you choose one | Shown publicly next to the engines you post on the leaderboards. |
| Engines you post and their scores (build code, engine type, scores, in-game cost and weight, date) | When you post to the leaderboards | To rank them on the public leaderboards. Other players can see and load engines you post. |
| Purchase records (what you bought, price, currency, date, Stripe reference numbers, refund status) | When you buy Pro or the Style pack | To unlock what you paid for, handle refunds, and keep the sales records tax law requires. |
| Sign-in cookie | While you are signed in | One strictly necessary cookie that keeps you signed in for up to 30 days. |
| IP address and browser information | On each request to our server | To keep the site secure and stop bots and abuse (for example, limiting how many sign-in codes can be requested). Our server stores only a scrambled (keyed hash) form of the IP address, for about an hour. See also section 4. |
| Support emails | If you write to us | To answer you. |
| Acceptance record | When you create an account | The date you confirmed your age and accepted these terms. |
We do not receive your card details. Payments are entered on Stripe's own checkout page, and Stripe gives us only the purchase record above.
Stored only in your own browser, never sent to us: the engines you build and save, your settings, challenges and your personal run history. Clearing your browser data removes them.
2. What we do not do
- We do not sell or rent personal information, and we do not "share" it for cross-context advertising.
- No advertising, no third-party analytics or tracking cookies, and no profiling.
- No marketing emails. The only emails we send are sign-in codes (and Stripe sends your receipts).
3. Why we are allowed to use it
Where privacy law asks for a legal reason (for example in the EU and UK):
- To provide what you asked for (your account, sign-in, leaderboards and purchases): performance of our contract with you.
- To keep sales records: our legal obligations, including tax law.
- To protect the site from bots, fraud and abuse: our legitimate interest in keeping the service secure, balanced against your privacy by keeping only scrambled, short-lived data.
In Canada we rely on your consent, which you give when you create an account, and you can withdraw it at any time by deleting your account.
4. Who we share it with
Only with the service providers that run the site for us, each bound to use the data only to provide their service:
- Cloudflare, Inc. (United States): hosting, database, network security, and the Turnstile bot check on the sign-in form, which looks at browser and device signals to tell people from bots.
- Stripe (Stripe, Inc. and its affiliates): payment processing, fraud prevention and receipts. Stripe is an independent controller of the payment information you give it; see Stripe's privacy policy.
- Resend (United States): delivers our sign-in code emails.
Your username and posted engines and scores are public by design. We may also disclose information if the law requires it, to protect people's safety, or as part of a sale or transfer of the game (in which case this policy continues to apply).
5. Where your data is stored
Our providers may store and process data in the United States and other countries outside your own, where the law may differ from yours. Where required, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. How long we keep it
- Account, username, posted scores: until you delete your account.
- Sign-in codes: 10 minutes. Sign-in sessions: up to 30 days, or until you sign out.
- Scrambled IP data for rate limits: about one hour.
- Purchase records: 7 years, because Canadian tax law requires sales records to be kept for six years after the end of the tax year. If you delete your account, these records stay but no longer contain your name, email or account.
- Support emails: as long as needed to help you, then deleted.
7. Your choices and rights
- Download your data: in the game, Settings → Privacy and your data → Download my data.
- Correct it: change your username in Settings. To change your email, contact us.
- Delete it: Settings → Delete account removes your account, username and every score you posted immediately.
- Ask us anything, or object or restrict: email [support@yourdomain.com]. We answer within 30 days. We may need to confirm the request comes from the account's email address.
Depending on where you live you may have further rights, for example under Canada's PIPEDA and Alberta's PIPA, the EU and UK GDPR, or California's CCPA/CPRA. We will not treat you differently for using them. If you are unhappy with our answer you can complain to your privacy regulator, such as the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner of Alberta, or your local data protection authority.
8. Children
Anyone can play without an account. Accounts and purchases are for people aged 13 or older; where you live may set a higher age for agreeing to this on your own (for example 16 in parts of the EU), in which case a parent or guardian must agree for you. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, email us and we will delete it.
9. Security
The whole site uses encrypted connections (HTTPS). There are no passwords to steal: you sign in with single-use codes, which we store only in scrambled form, and session cookies are stored only as hashes. Access to the systems is limited and protected by two-factor authentication. No system is perfectly secure; if a breach affects your personal information we will notify you and the authorities as the law requires.
10. Cookies and browser storage
We use one strictly necessary cookie to keep you signed in. Cloudflare may set strictly necessary security cookies, and the Turnstile check on the sign-in form may use browser storage to verify you are not a bot. The game saves your engines and settings in your own browser's local storage. There are no advertising or analytics cookies, so there is nothing to opt out of.
11. Changes
If we change this policy we will update the date at the top, and for important changes we will tell you in the game before they take effect.
12. Contact
[Your full legal name, or your business name if you register one], Alberta, Canada · [support@yourdomain.com]