Privacy Policy

What we store

Your email address, if you sign in by email code or with Google, or enter it after opening the game inside an app (Instagram, Telegram, TikTok and others). It identifies your account and nothing else.

A display name, language and game server, if you choose them.

Your game progress: the airline you build, its routes, fleet and finances inside each world.

If you play as a guest, we store a random identifier in your browser and no email at all. The guest account record holds a technical placeholder written in the shape of an address; it is not a mailbox, nothing is ever sent to it, and it is never shown to anyone.

The IP address and browser of each sign-in session, stored next to the session itself. It is how a session can be told apart from another and cut off if you ask.

Your precise location is not stored. Cloudflare tells our server the country and city it reads from your IP address; we use that to suggest the game server nearest to you and to decide which analytics counters may run for you (see Tracking), and the answer goes to your browser without being written down. Only the server you pick yourself is saved. The same IP address also counts requests, so that one visitor cannot flood the service.

The days you played. For each day you open the game we record the date, the time of your first and last visit to the nearest hour, and a two-letter country code (for example, TH), so we can see how many people play, whether they come back and from which countries. No IP address, city or browser details are attached to this record. It is kept for up to 400 days and is deleted together with your account.

Why we store it

To let you sign in and to keep your airline between sessions.

To send you a sign-in code when you ask for one.

We do not sell your data to anyone. Data from Google Analytics also lets us show Jetopolis ads through Google Ads, as described under Tracking.

Who else sees it

Cloudflare hosts the service, stores the data, and, being the network in front of it, sees the IP address of every request.

Resend delivers sign-in emails and the email on how to continue the game on another device after you enter your email when you start, and therefore sees your email address.

Telegram delivers our internal admin notifications, which can include your display name and country.

Google, only if you choose to sign in with Google, and only your email address and basic profile.

Stripe (stripe.com), which processes card payments, only if you buy the Captain subscription: it sees your email address, country and payment details. Subscription payments are received by Leonid Ustinov, an individual entrepreneur in Thailand, who sees the payment records in the Stripe account. We never see your card number.

Google also receives Google Analytics data and uses it for our advertising, and Yandex receives Yandex Metrica data from visitors in Russia, as described under Tracking.

Tracking

We use two analytics services to see how many people visit, where they come from and which parts of the site and the game they use. Google Analytics also serves our advertising: through Google Ads we show Jetopolis ads to people who have visited us before.

Google Analytics 4, by Google, runs on the site and in the game for visitors from every country. It sets the cookie _ga and a second cookie whose name starts with _ga_ followed by the code of our Google Analytics property, each for up to two years, and sends Google the pages you open, the page that sent you, your browser and device, and an approximate location that Google derives from your IP address. Google may process these data outside your country, including in the United States.

Advertising. Google Signals and ad personalisation are switched on. If you are signed in to a Google account that allows ad personalisation, Google can link these visits to that account and add you to the audiences we use in Google Ads, so that you may see Jetopolis ads on other sites and apps. For this Google may set its own advertising cookies on this site and on Google domains such as doubleclick.net. We never see who you are: Google gives us counts and audiences, not names.

In the European Union, the European Economic Area, the United Kingdom and Switzerland we ask first: until you press Accept, the Google Analytics script is not loaded at all and no Google cookies are set, and Accept allows both analytics and advertising. Everywhere else both start on your first visit.

Yandex Metrica, by Yandex, runs only on the pages of this site (the home page, guides and documents) and only for visitors from Russia; the game does not load it. It counts visits, clicks and links followed, sets cookies such as _ym_uid and _ym_d for up to a year and _ym_isad for up to 20 hours, and keeps similar records in your browser storage. Session recording (Webvisor) is off, and we use Yandex Metrica for statistics only, not for advertising.

We learn which country you are in from Cloudflare, as described above, and ask no other service.

How to decline. In the EU, the EEA, the UK and Switzerland, press Decline in the banner. Anywhere, you can change your choice at any time with Cookie settings at the bottom of every site page or in the game's Settings: Decline stops both counters and Google advertising on this device and deletes their cookies on this site. Your choice stays in your browser storage, so the banner does not come back, and it never reaches us. To stop personalised Google ads on every site, turn off ad personalisation in your Google account at myadcenter.google.com. Google also offers a browser add-on that blocks Google Analytics everywhere: tools.google.com/dlpage/gaoptout. Tracker blockers in your browser also stop both counters, and the site and the game work without them.

Cloudflare, our host, also adds its own page counter to the pages it serves. It counts page views and loading speed through the browser API meant for that, it belongs to the same company that already runs the service, and Cloudflare states that it collects no personal data.

Our session and language cookies support ordinary use. One holds your session, so that you stay signed in. The other remembers which of the 25 languages you picked, for a year.

To understand how players find Jetopolis, we store our own jt_source cookie on this device for up to 30 days. It contains the category of the first traffic source, the landing page, the site language, an allowed campaign label and the visit time. When an account is created, including a guest account, we record once with it the source category, campaign label and landing page from this cookie; that record lives as long as the account. When an airline is founded, we record the event, its source and internal user, world and company identifiers in Cloudflare D1. These analytics records do not contain an email address, IP address, search query or full external page URL and are retained for up to 90 days. Deleting an account removes the link to its user identifier. You can still play if cookies are blocked, but the traffic source may be unknown. If your browser itself reports that it is controlled by a program (automated testing tools do this), we mark the account as automated so it is not counted as a player; if the game is opened in an app's built-in browser, we mark that once on the account the same way. No other browser details are kept for this. We do not use these data for advertising profiles or send them to third-party advertising trackers.

If you open an invitation link, an invitation cookie appears for thirty days. It holds the invitation code from that link and nothing else: no name, no email address, no identifier of you. Scripts on the page cannot read it, and the browser sends it to jetopolis.app only. If you create an account while it is there, we record once which player invited you, and that record is what an invitation reward is paid from later. Without an invitation link this cookie is never set.

If you sign in with Google, a temporary cookie exists for five minutes: it ties the trip to Google and back to the browser that started it, which is what stops someone else from finishing your sign-in.

Your display settings - the night shade on the map, smooth aircraft motion - stay in your browser storage on this device. They never reach us.

How long we keep it

While your account exists. You can delete it yourself at any time: Settings, the Account section, the Delete account button. We show what will happen, ask you to type a confirmation word and, if you sign in by email, send a code there. A guest needs no email: the word is enough.

What happens after deletion. Your airlines in running worlds close the way a bankrupt airline does: the aircraft go to the used market, and the routes and your place in the world open up for other players. Your email, name, IP addresses, browser details and the days you played are erased together with the account, your Google and Discord links, your settings and notification subscriptions. Your support requests and ideas stay, no longer tied to you. Deleted data cannot be restored.

World history, results and the hall of fame keep only your airline's name, without your name or email. Finished worlds stay as historical results, exactly as they ended.

YouTube

Our videos on YouTube are published by our own internal tool, which uses YouTube API Services. It works only with our two Jetopolis channels: it uploads our videos and reads the statistics of these two channels for our internal dashboard. It does not access, store or share personal data of viewers or of any other YouTube user. Once, on 3 October 2026, the same tool read public listings of other channels' videos (titles, lengths, view counts) to study the format of aviation videos; that one-time internal report is the only such use, and no personal data was involved.

When you watch our videos on YouTube, you use YouTube itself, which is governed by the YouTube Terms of Service and the Google Privacy Policy. We keep these statistics only for our internal dashboard, check once a month that the access of our tool is still valid, and delete the statistics within 30 days if the access is revoked. Access of our tool to our channels can be revoked at any time on the Google security settings page.

Your rights

You can delete your account yourself in Settings, as described above. To see or correct your data, or if deletion does not work for you, write to hello@jetopolis.app. We answer from the same address.

Children

The game is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes, the new version appears on this page with a new date at the top.