Privacy
Last updated 16 October 2026.
This is a game. It collects what it needs to let you keep an airline between visits, and nothing for advertising, profiling or resale. There are no analytics, no tracking pixels and no third-party scripts on the page — the map library and the fonts are served from here rather than from somebody else's network. The one exception is playing on CrazyGames, below.
What is stored, and why
| What | Why |
|---|---|
| A player code — a random string your browser generates the first time you play | It is what owns your airlines when you have not signed in. It holds no personal information and is not issued by the server. |
| Your email address, if you create an account | To sign you in, and so an airline survives a cleared browser. Playing as a guest needs no account and no address. |
| Your password, hashed with Argon2id | Never stored as a password and never in any form it can be read back from. |
| A display name, if you set one | Shown to other players in a shared world. |
| When the account was created and last signed in | To expire old sessions and to answer "is this account in use". |
| Your game — airlines, aircraft, routes, money, results | It is the game. Without it there is nothing to come back to. |
Cookies
One, and only once you sign in: a session cookie that keeps you signed
in for 30 days. It is HttpOnly (scripts cannot read it),
SameSite=Lax (other sites cannot use it) and sent only over
HTTPS in a deployed install. There is no advertising or analytics cookie,
so there is no consent banner to click past.
Your player code and a handful of display preferences — which basemap you picked, how wide the panel is — are kept in your browser's own storage rather than in a cookie, and are never sent anywhere except as part of asking for your own airlines.
What the server writes down
Requests that fail or run slowly are logged: the method, the path, the status, how long it took, and an id so one report can be traced. An unhandled error logs a stack trace, and you are shown a short reference that appears beside it. Your email address and your player code are deliberately kept out of error reports.
To stop one caller overwhelming the server, recent request counts are held in memory against your IP address and player code. They are never written to disk, are bounded in number, and are discarded within minutes.
Who else sees anything
- The map tile provider. The map is drawn from tiles your browser fetches directly, so that provider receives your IP address and which part of the map you are looking at. It does not receive your account, your player code or anything about your airline.
- The hosting provider, which necessarily handles the traffic and may log IP addresses at the network level.
- An error-reporting service, where one is configured, which receives stack traces and the request id — not your email address and not your player code.
Playing on CrazyGames
The game can also be played inside CrazyGames' site. There, and only there, the page loads CrazyGames' own SDK, and two things differ:
- Your player code, and which airline you last had open, are kept in CrazyGames' save storage instead of this browser's. That is what lets a player who is logged into CrazyGames carry on from another device. Your airline itself is still held here, on this game's server.
- CrazyGames' SDK is their software, running on their site, and what it collects is described in CrazyGames' privacy policy, not this one.
Inside their site there is no sign-in to this game and no way to buy anything from it. Everything else on this page applies there as here.
Nothing is sold, rented or shared for advertising. There is no advertising.
How long it is kept
Your game is kept while you keep playing it. An airline you wind up leaves a record of the run — its final valuation, days flown, passengers carried — so a later airline has something to beat; you can delete those records yourself from the opening screen. Backups of the database are taken and are kept for a limited period, so a deletion may persist in a backup for a short time before ageing out.
Deleting everything
In the game, under Profile, an account can be deleted. It is a real deletion and not a flag on a row that stays in the table: the account, every airline it owns and every record of a wound-up airline go in one transaction, and you are signed out everywhere.
Playing as a guest, your airlines belong to the player code in your browser. Winding them up and clearing that code removes your side of it entirely.
Your rights
If you are in the UK or the EU, data protection law gives you the right to see what is held about you, to correct it, to have it deleted, and to complain to your data protection authority. Deletion is built into the game and needs no request. For anything else, write to the address below.
Children
The game is not aimed at children under 13, and accounts are not knowingly created for them.
Changes
If what is collected changes, this page changes with it and the date at the top moves.
Contact
Write to privacy@runmyairline.com — about anything on this page, or to ask what is held about you. Run My Airline is run by Venkatesh Damodaran, who decides what is collected and why.
This page describes what the software does, which has been checked against the code. It is not legal advice and has not been reviewed by a lawyer. Have someone qualified read it before you rely on it.