Last updated: 9 October 2026
Flyover is a geography game. This policy covers the website at playflyover.com and the Android app, and it is written against what the shipped code actually does.
Flyover is made by Orestis Stratis, an individual, who is responsible for the personal data described here. You can reach him at [email protected].
You do not need an account. Free play, the daily challenge, every Atlas course and Your world all work without one, and without an account Flyover knows nothing that identifies you. An account exists for one reason: to keep your progress on every device and to hold Flyover Pro. The sections on accounts and on Pro below apply only if you create one.
Nothing that identifies you.
Without an account, Flyover does not ask for, collect, or transmit your name, email address, phone number, contacts, photos, location, advertising identifier, or device identifier.
Flyover keeps a small amount of game progress in local storage — `localStorage` in your browser, or the app's own storage on Android. Without an account it never leaves the device:
Clearing your browser's site data, or uninstalling the app, deletes all of it. Without an account there is no copy anywhere else, which also means a day streak cannot be recovered once it is gone.
You can sign in with an email address, which receives a six-digit code each time (there is no password), or with Google. We then keep:
On the website a signed-in session is kept in a cookie of our own, named `flyover_session`. It is strictly necessary for signing in, is never used for anything else and is never shared, so it needs no consent banner. In the Android app the session is kept in the app's secure storage.
We use this data to run your account and Pro (the contract between us), and for nothing else. It is never sold, never used for advertising and never joined to the random analytics identifier described below.
Flyover Pro is sold by Paddle on the website and by Google Play in the Android app. They are the merchant of record: they take the payment, charge any VAT, and keep your payment details, name and billing address under their own privacy policies. We never see your card.
RevenueCat keeps the record of who has Pro, so that a subscription bought on one platform works on the others. It receives your account's random identifier and the details of the purchase (what, when, until when, in which store); it does not receive your game progress.
Your account and its progress are kept until you ask us to delete them. To delete your account, email [email protected] from the address you sign in with; we delete the account, its progress and its sessions within 30 days. Your device keeps its own copy until you clear it. Records of purchases are kept by Paddle, Google Play and RevenueCat for as long as tax law requires them to be.
This section changed on 18 September 2026 and describes what the code has done since 14 September 2026. Before that date there was no identifier at all, and an earlier version of this policy said so.
When you first play, Flyover generates a random identifier and stores it on your device alongside everything else above. It is attached to the usage events described below.
What it is:
What it is for: counting how many different people play, and whether anyone comes back a second day. Without it, every visit looks identical to every other and neither question has an answer.
What it is not for: building a profile, following you between sites or apps, advertising, or anything that is sold or shared. It is never connected to an account, even if you sign in. Nothing else happens with it.
Flyover sends events about how the game is played, so we can see whether it works and where people stop. An event records things like: which mode was played, which city was shown, the round number, whether the answer was correct, how long it took, whether the round timed out, the final score, and whether you were on a phone or a desktop browser.
Two things are true of every one of these events:
We use PostHog, hosted in the European Union, to receive these events. As with any request over the internet, your IP address is visible to them in transit; we instruct them not to store it with the event or to use it to locate you.
The identifier above is random and exists only on your device, so we have no way to tell which events belong to which person, and no way to look yours up if you asked. Clearing your site data or uninstalling the app stops any further events and starts a new identifier that cannot be connected to the old one.
On the website, the city images are fetched from playflyover.com as you play. In the Android app the game's images are included in the app itself and the game works fully offline. If you sign in, your device also talks to our server at playflyover.com to keep your progress in step.
Without an account, Flyover collects no personal data from anyone, including children. If you are under 16, ask a parent or guardian before you create an account or buy Flyover Pro.
Flyover contains no advertising and no advertising trackers. Nothing is sold.
These companies are involved in running it:
Some of them are based in the United States. Where your data is transferred outside the European Economic Area, it is protected by the safeguards the GDPR requires, such as the European Commission's standard contractual clauses.
If you install Flyover from Google Play, Google collects its own data about the installation under its own privacy policy. That is between you and Google; Flyover receives none of it.
City maps are rendered from OpenStreetMap data, © OpenStreetMap contributors, available under the Open Database Licence (ODbL). Rendering happens before release; neither the website nor the app contacts OpenStreetMap or any map service while you play.
Under the GDPR you can ask to see the personal data we hold about you, to correct it, to delete it, to receive a copy of it, or to object to how it is used. Email [email protected]. You can also complain to the Commissioner for Personal Data Protection in Cyprus, or to the data protection authority where you live.
If this policy changes, the date at the top changes with it.