Last updated: November 7, 2026 · Applies to vectofly.com (the "Game", "we", "us")
VectoFly is a free browser game. You do not need an account, and we collect as little as we can. This policy explains what is used when you play, why, who else is involved, and the choices and rights you have wherever you live. By playing you acknowledge this policy. Questions: contact@vectofly.com.
The VectoFly team operates the Game and decides how the information below is used (the "controller" under GDPR/UK GDPR). Contact for any privacy matter: contact@vectofly.com.
| What | Why | Where it lives |
|---|---|---|
| Saved game data: settings, difficulty, coins, unlocked planes/paints/maps, personal bests, a random anonymous player ID, your random pilot name | Lets the game remember you and lets your leaderboard entry be updated instead of duplicated | Your browser's local storage (not sent to us, except the items in the next row) |
| Leaderboard submission: pilot name, score, distance, level, plane, difficulty, anonymous player ID, time of the run, a short signed run ticket and run statistics used to detect cheating | To show the world leaderboard and to keep it fair | Our database (Google Firebase Realtime Database), served through our API on Vercel. Your score and pilot name are public |
| Visit and game counters: the anonymous player ID is counted once to show "pilots" and a total of games started | The counter at the bottom of the menu | Our database. The counter only shows totals |
| Analytics (Google Analytics 4): pages viewed, approximate location (country/city level), device, browser, screen size, language, referring site, session length, random identifiers stored in cookies | To understand how many people play, which devices need fixes, and which pages help | Google Analytics (Google LLC / Google Ireland Ltd). See section 5 |
| Advertising (Adsterra): cookie and device identifiers, IP address, browser, page and ad interaction data | To show and measure ads that help pay for the game, and to prevent ad fraud | Adsterra and its advertising partners, under their own policies |
| Technical logs: IP address, user agent, requested URL and time | Security, abuse prevention (for example rate-limiting score submissions) and keeping the site running | Our hosting provider (Vercel) and database provider (Google). Short-lived |
| Emails you send us: your address and what you write, plus device details if you use the "Report a bug / feedback" link | To answer you and fix issues | Our mailbox |
We do not ask for your real name, address, phone number, precise location, payment details or any sensitive personal data, and we do not knowingly collect them.
The leaderboard shows your pilot name and best score to everyone, including people who are not playing. Because pilot names are generated randomly from a fixed word list, they never contain personal information. Any name that does not follow that format is automatically replaced, and names typed by players before 1 November 2026 are no longer shown. To have an entry removed, email us the pilot name and roughly when you played (see section 10).
We use Google Analytics 4 (measurement ID G-LXSLC7ZVNW). It sets first-party cookies (usually named _ga and _ga_LXSLC7ZVNW) containing a random identifier so repeated visits can be recognised. Google Analytics 4 does not log or store full IP addresses. Data is used for statistics about the Game; we have not enabled Google advertising features in Analytics. Analytics data is kept for the retention period configured in our account (up to 14 months).
Your choice: use the Opt out button in the notice shown on your first visit, or here: . You can also block cookies in your browser, use Google's browser add-on, or enable a "Global Privacy Control" / "Do Not Track" setting. More on cookies: Cookie Policy.
VectoFly shows banner ads from Adsterra (adsterra.com) on its information pages and in the game: a banner on the menu and game-over screen, and small panels beside (large screens) or above and under (phones and tablets) the game area. Ads never cover the game, and VectoFly does not use pop-up or pop-under windows. Adsterra and its advertising partners may use cookies and similar technologies to show and measure ads. If you choose Opt out in our cookie notice, we stop loading ads in that browser.
Where the EU/UK GDPR applies we rely on: legitimate interests (running the Game, the leaderboard, security, preventing cheating and abuse, understanding usage); consent (analytics cookies, where required - you can withdraw it at any time with the opt-out above); and contract/steps at your request (answering your emails).
We do not sell personal information. We do not make automated decisions with legal or similarly significant effects. (The anti-cheat system may reject an implausible score; you can contact us if you believe it was a mistake.)
Our providers operate globally, so information may be processed in countries other than yours, including the United States. Where required we rely on safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses offered by those providers.
Depending on where you live (for example the EU/UK, California, Brazil, Canada, Australia, India) you may have the right to: access your information; correct it; delete it; restrict or object to processing; receive a copy (portability); withdraw consent; and complain to your local data protection authority. California residents can also ask what categories are collected and opt out of "sale" or "sharing" - we do neither. We will not treat you differently for using these rights.
How: email contact@vectofly.com with the pilot name you used (and approximately when you played) so we can find your leaderboard entry. We will reply within 30 days. We may need to confirm that the request really comes from you. Because we cannot identify you from a random player ID alone, entries are matched using the pilot name and details only you would know. You can also delete everything stored on your device by clearing this site's data in your browser.
VectoFly is a general-audience game and is not directed at children under 13 (or the higher digital-consent age in your country, which can be up to 16). We do not knowingly collect personal information from children. If you are a parent and believe a child gave us personal information (pilot names are random, so this should not happen, but if you think it has, tell us), email us and we will remove it.
The database is locked: browsers cannot read or write it directly, only our API can, and scores must carry a valid signed ticket. No system is perfectly secure.
Our pages may link to other sites. We are not responsible for their content or privacy practices.
We may update this policy as the Game changes (for example if we add ads). The date at the top shows the latest version, and significant changes will be highlighted on the site.