Privacy policy

Who we are

Skyscrap (“we”, “us”) makes Skyscrap and runs the website at skyscrap.fun. For the personal data described in this policy, we are the controller: we decide why and how it is used.

You can reach us about anything in this policy at privacy@skyscrap.fun.

What this policy covers

This policy covers (together, the “services”):

• this website, skyscrap.fun;
• the Skyscrap game in your browser, wherever we host it;
• our game servers and related services once online play launches; and
• emails and other messages between you and us.

If you play Skyscrap on another company’s platform, such as a game portal or an app that embeds the game, that company’s own privacy policy covers what it collects. See who we share data with.

Guest play stays on your device

Playing against bots needs no account. The game keeps your callsign, avatar, settings and a few “already seen this tip” flags in your browser’s local storage. That information never leaves your device and we never receive it. You can remove it at any time by clearing the site data for Skyscrap in your browser. The cookies and storage page lists every item.

What we collect and why

We only collect personal data when we need it for a specific reason, listed here.

Visiting the website or loading the game

Like every website, our hosting receives technical data with each request: your IP address, browser and device type, the page or file requested, the referring page, and the date and time. We use it to deliver the site and the game, keep them secure, prevent abuse and fix errors.

Legal basis: our legitimate interest in running secure, working services. Kept: for a short period, normally no more than 30 days, unless we need it longer to investigate a security incident.

Messages you send us

If you email us, for support, a player report, press or anything else, we receive your email address, your name if you give it, and whatever you write or attach.

Legal basis: our legitimate interest in answering you, or taking steps you’ve asked for. Kept: up to two years after the conversation ends, then deleted.

Update emails

If you ask to be told when online play opens, we keep your email address, the date you signed up and the page you used. We only use it to send launch news and occasional major updates. Every email has a way to unsubscribe.

Legal basis: your consent, which you can withdraw at any time. Kept: until you unsubscribe or ask us to delete it.

Playtests

If you volunteer to playtest, we keep the contact details you give us (such as email or WhatsApp), your phone model and mobile network, and the results of tests you run, such as connection measurements.

Legal basis: your consent. Kept: until the test programme ends, plus up to six months to analyse results.

Online play (when it launches)

Online play is in development. When it launches, running fair matches will require the following. We describe it now so nothing changes by surprise.

• Guest profile: a random guest ID, your callsign and tag, your avatar choices, and a recovery code that we store only in hashed form.
• Match data: your inputs, positions, hits, scores and match statistics.
• Network and device data: IP address, an approximate country or region worked out from it, connection quality (ping and packet loss), and browser and device type, used to pick the nearest server and keep matches smooth.
• Age: before your first online match we ask how old you are and keep only whether you are 18 or over, never your date of birth. If you answer that you are under 18, that answer stays with your profile.
• Safety data: reports you make or that are made about you, including the reported player’s inputs from the last minute of the match, and the moderation decisions that follow.
• Crash and performance reports: error details, frame rate and server timing, so we can fix problems.
• Bot checks: when a guest profile is created we may use a privacy-focused challenge, such as Cloudflare Turnstile, which looks at browser signals to tell people from scripts.

Legal basis: providing the game you asked to play, and our legitimate interests in fair play, security and fixing bugs. Kept: guest profiles and their stats are deleted after 180 days without play; connection logs after up to 30 days; moderation records for up to two years.

What we don't do

• We don’t sell or rent personal data, and we don’t share it for cross-site advertising.
• There are no advertising or analytics trackers on skyscrap.fun.
• We don’t use device fingerprinting to follow you around the web.
• Online play will use preset quick-chat messages, not free-text chat.
• We don’t make decisions with legal or similarly significant effects about you by automated means alone. If an automated anti-cheat check leads to action against your profile, you can ask a person to review it.

Who we share data with

Service providers. We use other companies to run Skyscrap: website and file hosting, content delivery and protection against attacks, game servers, email delivery and error reporting. They process data only on our instructions and under contracts that require them to protect it. We’ll give you a current list on request.

Platforms you play through. If you play Skyscrap inside another platform, that platform may send us an identifier and display name so you can sign in, and it may collect data under its own policy.

Legal reasons. We may disclose data when the law requires it, to respond to valid legal requests, or to protect the safety and rights of players, the public or us.

Business changes. If Skyscrap is merged, acquired or sold, data may pass to the new owner, who must keep honouring this policy or tell you about changes first.

International transfers

Our providers may process data outside your country, including in South Africa, Nigeria, the European Union, the United Kingdom and the United States. When the law where you live requires it, including the EU and UK GDPR, Kenya’s Data Protection Act and Nigeria’s Data Protection Act, we use appropriate safeguards such as standard contractual clauses, and we transfer only what is needed.

How long we keep data

We keep personal data only as long as we need it:

• Hosting and connection logs: normally no more than 30 days.
• Support and other messages: up to two years after the conversation ends.
• Update-email list: until you unsubscribe or ask us to delete your address.
• Playtest data: until the programme ends, plus up to six months.
• Guest profiles (online play): deleted after 180 days without play, or sooner if you ask.
• Moderation records: up to two years, so repeated abuse can be recognised.

We may keep data longer where the law requires it, or to establish or defend legal claims.

Your rights

Depending on where you live, you can ask us to:

• tell you whether we hold data about you, and give you a copy;
• correct data that is wrong or incomplete;
• delete your data;
• restrict or object to how we use it, including objecting to processing based on legitimate interests;
• give you your data in a portable format; and
• withdraw consent you’ve given, without affecting what we did before.

Email privacy@skyscrap.fun. We’ll answer within one month, or sooner if your local law requires it, and we may ask for information to confirm the request is yours (for a guest profile, its recovery code). We don’t charge for requests unless they are clearly excessive.

You can also complain to a data protection authority, for example:

• Kenya: the Office of the Data Protection Commissioner (ODPC).
• Nigeria: the Nigeria Data Protection Commission (NDPC).
• European Union: the supervisory authority in your country. United Kingdom: the Information Commissioner’s Office (ICO).
• India: the Data Protection Board of India, after raising the issue with us first.

US state residents, including in California: you have the right to know what personal information we collect and how we use it, to delete and correct it, and not to be treated differently for using these rights. We don’t sell or share personal information as those laws define it, and we don’t use sensitive personal information.

Children

Skyscrap is not meant for children under 13, and players under 18 need a parent’s or guardian’s permission. We don’t knowingly collect personal data from children under 13, or under the age of digital consent where they live. If we learn that we have, we delete it.

Guest play against bots keeps everything on the device. Online play asks your age before your first match, and may be open only to players 18 and over at first. We’ll open it to younger players only with a parent’s or guardian’s consent where the law requires it, including in Kenya and Nigeria.

Parents and guardians can contact privacy@skyscrap.fun to ask about or delete their child’s data.

Security

We encrypt data in transit, limit access to the people who need it, store secrets such as recovery codes only in hashed form, and keep our systems updated. No service is perfectly secure, so if you find a weakness please follow our security policy to tell us.

Changes to this policy

When we change this policy we update the date at the top. If a change is significant, for example when online play launches, we’ll also say so on this site or in the game before it takes effect.

Contact

Skyscrap
Email: privacy@skyscrap.fun