Who runs Ledroon
Ledroon is a small independent project. Questions about your data, or a request to delete it: contact@ledroon.site.
Flying anonymously
Press “Play anonymously” and your flights, settings, times and replays stay in your browser on that device. We don’t send them anywhere and we can’t see them.
With an account
If you make an account, we store:
- Your pilot name and a hash of your password (never the password itself).
- Your settings (controls, rates, graphics), so they follow you to another computer.
- Your runs and results: times, scores, best runs, the replays of your runs and clips you save, stars and tags in your Library, how long you have flown, and your place in the weekly league.
- Performance reports you choose to send from the in-game diagnostic, if you ever press send.
Your name, best times and the replays of your best runs are public on the leaderboards. That is what makes leaderboards, ghosts and syncing between devices work.
We don’t ask for your e-mail, real name, age or location to make an account.
Cookies
One cookie: the session cookie (ledroon_session) that keeps you signed in, for up to a year or until you sign out. It is set only if you sign in. No advertising or tracking cookies, and no cookie banner, because there is nothing to agree to.
Anonymous statistics
To know whether the game works and whether people come back, the game sends a few anonymous counters: for example “someone opened the game today”, “someone took off”, “someone flew 5 minutes”, and which link they came from. Each is just +1 on a count for that day. There is no user ID, no device ID and nothing that links one count to another.
Once per flight, after a minute in the air, the game also sends how smoothly it ran: rough frame-rate ranges, the graphics preset, phone or computer, and the graphics card’s class (like “weak” or “strong”) and maker (like Intel or Apple), never its model. This tells us whether the default graphics suit your kind of device.
Visits to the website and the game are counted with Cloudflare Web Analytics, which uses no cookies. We don’t use Google Analytics and we don’t show ads.
Crash reports
If something breaks in the game (an error, or the graphics card resetting), the game sends a short report: the type of error (like “TypeError”), the names of the functions in the game’s own code where it happened and their line numbers, the game version, which screen you were on, your browser family (like Chrome or Firefox) and the graphics card’s class and maker. It never sends the error’s text, web addresses or folder names, because those can contain names. A report has no user ID or device ID, and we keep only a count per day and one example of each kind of error.
The launch e-mail
If you leave your e-mail address under “Get Ledroon Pilot”, we keep it only to tell you when it launches. It is not linked to an account or to anything you do in the game. Ask us and we’ll delete it.
Where it is stored
Everything the game sends is stored with Cloudflare (their Workers, D1 database and Durable Objects), which runs data centres in the EU, the US and elsewhere. Cloudflare processes it on our behalf.
When you fly real places, the game downloads map tiles and terrain for where you fly, and place search goes through OpenStreetMap’s Nominatim. Those services see your IP address, like any website you visit. Multiplayer connects players directly to each other (WebRTC), so other players in your room can see your IP address; Google’s STUN servers help set up the connection.
How long we keep it
- Account data: until you delete your account (the moderation record described under “Deleting your account” is kept after that, as long as the ban stands).
- Session: up to a year, or until you sign out (signing out ends it at once).
- Live multiplayer data (rooms, chat, connection set-up): removed within a day after it is last used.
- Anonymous counters, performance summaries and crash reports: as long as they are useful to improve the game. They contain nothing that identifies you.
- Rate-limit records (used to slow down password guessing and spam, keyed by IP address): about two days.
- The launch e-mail: until the launch e-mail is sent, or until you ask us to delete it.
Deleting your account
Open Settings → Account → Delete account and type your password. This deletes, at once and for good: your account and password, your settings, all your runs and results, your leaderboard times, the replays of your runs, clips and Library, your time flown and league places, your sessions on every device, and anything of yours in live multiplayer rooms. Normally your name then becomes free for anyone to take. What the game keeps in your browser on your own device stays there; clear the site’s data in your browser to remove that too.
What we keep after deletion, and why. To keep leaderboards fair, we keep a small moderation record when an account had runs flagged or removed as cheating, or had its results hidden from others (a shadow ban): your pilot name, which runs were flagged or removed (the track, the time, the date and the reason), the names of the pilots who reported them, and when and why a ban was given. No replays, settings or other results are kept. In that case your name stays reserved: nobody can register it, so nobody else inherits the ban and it can’t be shed by deleting and signing up again. If an administrator lifts the ban, the name is free again. We keep this because we have a legitimate interest in fair competition for all pilots; you can ask us about it or object at the contact above.
If you can’t sign in any more, write to us at the contact above and we’ll delete it for you.
Changes
The rules for playing (fair play, names and chat) are in the Terms of use.
If this page changes in a way that matters, we’ll say so on the website.