Privacy Policy

Tiny Takeoff — last updated: 11 August 2026

This policy explains what Tiny Takeoff ("the game") collects, why, and who else sees it. It covers the iOS, tvOS, desktop and web versions of the game, and this website.

Who we are

The game is made and operated by Rustunit, Blaak 520, 3011TA Rotterdam, Netherlands. Rustunit B.V. is the data controller for the processing described here. You can reach us at privacy@rustunit.com.

What the game collects

Your anonymous account

The first time you launch the game it creates an account for you automatically — there is no sign-in screen and nothing to fill in. That account consists of:

• a randomly generated account ID and a secret token, which together let your device prove the account is yours;
• a randomly generated display name, such as CrazyDancerMD396;
• the platform family you play on (for example ios or wasm) — not your device model or a device identifier;
• a two-letter country code;
• the date your account was created and the date you last played.

The country code is worked out from your IP address when your account is created, by a geolocation service we run ourselves. Only the two-letter result is stored — your IP address is not saved in our database. Like any web service, our servers and hosting providers do process your IP address in order to answer the request at all, and it may appear in short-lived server logs and in error diagnostics (see below).

Your runs

When you finish a run on the daily level, the game uploads a recording of it. That recording is purely gameplay: the tick numbers at which you pressed and released the one control, the length of the run, stars collected, your plane's colour, and which daily level it was. Our server replays those inputs through the same simulation the game runs, to confirm the score is real, and stores the result together with your score and distance. Runs that fail verification are kept and flagged rather than deleted.

A recording contains no location data, no device information, no text you wrote and no camera, microphone or photo data. The game asks for no such permissions.

Game Center (iOS and tvOS, optional)

If you are signed in to Game Center, the game links your account to it so your progress survives reinstalling the game or moving to a new device. To do that we receive from Apple, and store, your Game Center team player ID — an identifier that is specific to our games and cannot be used to identify you elsewhere — and your Game Center alias, which then becomes your public display name on the leaderboard. Verifying the sign-in involves a request from our server to Apple.

This is optional. If you are not signed in to Game Center, or decline, the game works normally with the anonymous account described above.

What is public

Tiny Takeoff is a competitive game with a global daily leaderboard. Your display name, country flag, score and rank are shown publicly to other players, and your recorded run can be replayed by others as a ghost. If you share a run, the link you create is public and shows the run and the display name attached to it. Please keep that in mind when choosing a Game Center alias, since it is used as your leaderboard name.

What is stored on your device

The game saves your account ID and token, your best runs and ghost replays, your audio settings and your notification preference on your own device — in browser localStorage on the web, and in the app's private storage on iOS, tvOS and desktop. The game itself sets no cookies. Clearing your browser storage, or deleting the app, removes this local data; on the web it also means the game can no longer reach the account it created, so it will make a new one.

Notifications

The game can remind you that a new daily board is up. This is off by default and only ever asked for when you turn the switch on. These reminders are scheduled locally by your device — we do not operate push notifications and no device push token is collected or sent to us. You can turn them off again in the game or in your system settings.

What we do not do

• No advertising, ad networks or ad identifiers. We do not access the IDFA and the game shows no ads.
• No tracking across other apps or websites, and no App Tracking Transparency prompt, because we do no tracking.
• No analytics or crash-reporting SDK inside the game itself.
• No in-app purchases or payments — we collect no payment data of any kind.
• No selling or renting of personal data, ever.
• No marketing emails, because we have no email address for you.

Who else processes this data

We use a small number of service providers to run the game. They act on our instructions:

• Neon — hosts the database holding accounts, scores and recordings.
• Vercel — hosts the web version of the game; its request logs include IP addresses.
• Sentry (EU region) — collects server error reports so we can fix faults. An error report can include the IP address of the request that triggered it.
• PostHog (EU region) — product analytics on the server. When a run is scored we send it the account ID, the public display name, the score and the rank, so we can see how the game is being played. No IP address, and nothing from your device, is sent.
• Apple — distributes the app and provides Game Center. Apple's own handling of your data is governed by Apple's privacy policy.

Some of these providers are based in the United States. Where data reaches them, the transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

Why we are allowed to do this

Under the GDPR we rely on performance of a contract — running the account, leaderboard and score verification you asked for by playing — and on our legitimate interest in keeping the game working, keeping the leaderboard honest, and understanding in aggregate how it is played. Notifications rely on your consent, which you give by turning the switch on and can withdraw at any time.

How long we keep it

Your account and your runs are kept for as long as the account exists, so that your records and your place in the game's history survive from one day's board to the next. We are working towards automatically clearing out old recordings that no longer back a live leaderboard. Everything tied to your account is deleted when you ask us to delete it.

Your rights and deleting your data

You can ask us for a copy of the data attached to your account, ask us to correct it, or ask us to delete it outright. Write to privacy@rustunit.com.

Because the game never asks who you are, we cannot look your account up from a name or an email address. The way to point us at it is to use the game's share button on one of your runs and send us the link it produces — it identifies the run, and through it the account. Telling us your in-game display name and roughly when you played helps us confirm the match. There is currently no self-service delete button inside the game; we handle these requests by email, normally within 30 days.

Deleting your account removes your display name, country, Game Center link and runs, and takes your entries off the leaderboard. If you are in the EU or UK and think we have handled your data badly, you may also complain to your national data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.

Children

Tiny Takeoff is a general-audience game and is not directed at children under 13. We do not knowingly collect personal data from children under 13, and the game asks for no personal information from anyone. If you believe a child has provided us with personal data — most plausibly by using a real name as a Game Center alias — contact us and we will remove it.

Security

Traffic between the game and our servers is encrypted with HTTPS, as is the connection between our servers and the database. No system is perfectly secure, but the best protection here is structural: we hold very little about you, and nothing that could identify you offline.

This website

tinytakeoff.com uses Fathom Analytics to count visits. Fathom is cookieless, does not track visitors across sites and does not build personal profiles. The web version of the game, at web.tinytakeoff.com, carries no analytics at all.

Changes to this policy

If we change what we collect, we will update this page and the date at the top. Significant changes will also be announced in the game or on this site.

Contact

Questions about this policy, or about your data:

• Email: privacy@rustunit.com
• Post: Rustunit, Blaak 520, 3011TA Rotterdam, Netherlands