Privacy policy

PANIC ALTITUDE is operated by Motivaatiomonttu. Privacy contact: monttumotivaatio@gmail.com.

Playing and saving progress

No email, password or real name is required. The game creates a random private player key in your browser storage. A one-way hash identifies your saved progress on our server. We store unlocked levels, completion status, best Story distance and update timestamps so you can continue playing. Settings stay in your browser.

This key is tied to this browser or app installation. Clearing its storage can remove your access to saved progress. There is currently no cross-device sign-in or recovery account.

World leaderboard

The leaderboard uses Supabase when connected. When Public Story scores is on, your best Story distance and update time are submitted with a generated player identifier. Your chosen pilot nickname is stored with your game profile and displayed beside your score. The pilot name and distance are public. Use a nickname rather than your real name. Your chosen nickname is permanent for this player profile. It also appears next to an existing score. Levels mode never publishes scores. Switch off Public Story scores in Settings before starting a run to stop new public submissions; this does not remove an existing score.

If the leaderboard is not connected or unavailable, the game says so. An opted-in best Story score is also kept with your saved progress and retried when you next open the menu or leaderboard after the connection is available. We do not display invented player scores.

Run verification

We receive a run identifier and your impulse inputs, simulation step counts, playfield height and timing to recalculate the run and reject invalid results. The input replay is processed in memory and is not stored as a replay file. Session metadata contains mode, starting level, random seed, playfield height, start time, distance and completion status.

Service providers and technical data

Hosting is provided through OpenAI Sites and Cloudflare. Saved progress and session metadata use Cloudflare D1. World scores use Supabase when configured. Network providers necessarily process IP addresses, request details and security logs to deliver and protect the service. Our game code does not add advertising, advertising identifiers, third-party analytics, location tracking, purchases, camera, microphone or contact access.

Providers may process data outside your country, including outside the EEA, under their applicable contractual safeguards. We use HTTPS for network traffic. We do not sell player information.

Purpose and legal basis

We use progress and necessary technical data to provide the requested game service. Run validation and security processing serve our legitimate interest in keeping play and rankings fair. Public score submission is optional and controlled in Settings. If you contact support, we use your message and email address to answer your request.

Retention and deletion

Saved progress and world scores remain until you delete them or the service is discontinued. Session records older than 24 hours are removed when that player starts a new run; inactive session records can remain until the next run or a deletion request. Provider security logs and backups follow the provider's retention policies and may remain after deletion from active game databases.

Settings → Delete my data removes your saved progress, run sessions and connected world score, then clears the game's local player key, best score and settings. If remote deletion fails, the game keeps the key so you can retry. See data deletion for the web option and support requests.

Your choices and rights

You may request access, correction, deletion or restriction of your personal data and object to processing where applicable. Contact us using the address above. Do not send your private player key by email. You may complain to your local data protection authority; in Finland this is the Office of the Data Protection Ombudsman.

Children and updates

The game does not ask for age or knowingly request children's real names or contact information. A parent or guardian can contact us about a child's data. Any eventual Google Play target audience and age rating must match the published store listing. We update this page when the game's data practices change.

Abuse prevention

temporary request counters use hashed network identifiers and player identifiers to limit excessive requests. Raw IP addresses are not stored in these application counters. Expired counters are periodically removed.