It Flies …or not?Privacy Policy
Effective 22 October 2026
This policy explains what data the It Flies game collects when you play at itflies.ciraly.com, why, and the choices and rights you have. We keep data to the minimum the game needs.
In short: there are no sign-ups, emails or passwords. Your browser gets a random player id. We store your player name and your scores so the leaderboards and online play work. There are no ads, no analytics and no cookies. You can delete everything yourself from the game's Leaderboard screen.
1. Who we are
It Flies is made by Ciraly, which is the data controller for the personal data described here. Contact: gamessupport@ciraly.com.
2. What we collect
| Data | What it is |
|---|---|
| Player id | A random id your browser creates the first time you open the game. It is not linked to your phone number, email or any advertising id. |
| Player name | An emoji plus "Flyer" and a number, or a name you choose. |
| Scores | Your best solo score and when you set it, how many solo games you played, and your online wins, losses and draws. |
| Last visit | When your player was last used. |
| Technical data | Your IP address, needed to connect to our server. Our web server keeps standard access logs. |
On your device, the game keeps your player id, name, best score and a copy of the picture list in your browser's local storage. The website stores only whether you dismissed the privacy notice. None of this is a cookie and none of it is used for tracking.
We do not collect your real name, email address, phone number, contacts, photos, location or payment details. Online matches are held in memory while they are played; only the result (win, loss or draw) is saved.
3. How and why we use data
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Running the game: your player, online matches and leaderboards | Performance of a contract: providing the game you asked to play |
| Keeping play fair and safe: checking scores, limiting abuse, fixing bugs | Legitimate interests: a fair and working game |
| Complying with the law and answering your requests | Legal obligation |
4. Who can see or receive data
- Other players see your player name and score during online matches, and the leaderboards show the top players' names and scores.
- Service providers who host our server and database process data for us under contract and only on our instructions.
- Authorities, if the law requires it.
We do not sell your personal data.
5. Where data is stored
Our game server is in the United States. If you play from the EEA, UK or Switzerland, your data is transferred there under appropriate safeguards, such as the European Commission's Standard Contractual Clauses offered by our hosting providers.
6. How long we keep it
Your player and scores are kept until you delete them. Server access logs are kept for a short period for security and then deleted.
7. Your rights under the GDPR and UK GDPR
If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to:
- Access the personal data we hold about you and get a copy.
- Rectification: change your player name at any time on the game's home screen.
- Erasure: open the game's Leaderboard screen and tap Delete my data. Your player and scores are erased at once.
- Restriction of processing in certain cases, and data portability.
- Object to processing based on legitimate interests.
- Complain to your local data protection authority.
Because we don't ask for your name or email, include your player name when you email gamessupport@ciraly.com, so we can find your player. We answer within one month.
8. US state privacy rights
Residents of California and other US states with privacy laws can ask to know, correct or delete their personal data using the same options above. We do not sell or share personal data, and we show no ads. We will not treat you differently for using these rights.
9. Children
It Flies is suitable for all ages. No sign-up, email, phone number, real name, photo, location or contacts are ever asked for, there is no chat, and player names are checked against a list of offensive words. A parent or guardian can delete a child's data at any time with Delete my data, or by emailing us.
10. Security
Connections to our server use HTTPS and access to the database is restricted. No system is perfectly secure, but we work to protect your data and will inform you and the authorities of a breach where the law requires it.
11. Changes and contact
If we change this policy we will update the date at the top of this page. Questions or requests: gamessupport@ciraly.com.