← Terms & privacy
Privacy Policy
Your data, in your repo
The short version: no ads, no analytics, no tracking and nothing sold. What you make and score goes into your own Bluesky repo, where anyone can read it and only you can delete it. Your photos and drafts stay on your device until you choose to publish them. Our servers keep only what the boards, the gallery and moderation need.
Effective October 23, 2026. This covers gamethesky.com and every Game the Sky game.
What's public
When you save a run or publish a game, it's written as a record in your own Bluesky repo, the same place your posts live. Records in a repo are public: anyone can read them, and other apps can see them. That includes:
- Games you publish on gamethesky.com (and houses on Haunt the Sky): the chapters, words, colors and levels, and any pictures and sounds you put in them.
- Runs you save: the inputs you played, the score and the seed, so anyone can watch the replay.
- Photos, but only if you turn on “Include my cast” or “Include my faces” when you publish or save. Then they're uploaded to your repo and everyone who plays or watches meets them.
- Sounds you record or upload for a game, when you publish it.
- Your handle and avatar, shown next to your runs on boards, on share cards, in the gallery of games people made, and in the posts @gamethesky.com makes about new games.
What stays on your device
A lot never leaves your browser. It's kept in its local storage and IndexedDB, per site:
- Drafts of games you're making, with their pictures and sounds.
- Your cast library: the people you've added and their photos. Photos are cut out of their backgrounds right in your browser; nothing is sent anywhere to do it.
- Settings and choices: sound, music, difficulty, whether to include your cast, and the “these people have agreed” box.
- Local bests, ghosts, and your sign-in session.
Clearing the site's data in your browser deletes all of it. The microphone is used only while you're recording a sound, after you press Record.
What our servers keep
The games run on Netlify, plus a few small servers of our own for live play. Our code keeps only this:
- Board entries: for each ranked run, your account's ID (DID), handle, score and a few stats from the run, when it was played, and a link to the record in your repo. Each board keeps its top 1,000.
- The gallery index (gamethesky.com): for each published game, its title, description, chapter list, colors, card, maker's ID and handle, whether it has a cast, and play counts. It's built from public records, and a game drops out when its record is deleted.
- Moderation lists: the games our moderators have hidden, and the reports people send (which game, the reason chosen, when, and for 30 days a hashed network address, below). Each list keeps its latest 5,000 reports.
- Hashed network addresses, for report limits only. So nobody can flood the Report button, gamethesky.com turns the sender's IP address into a one-way hash (SHA-256 with a secret salt, shortened). The hourly count kept against each hash is deleted about two hours later. The hash stays with a report for 30 days, so the same person can't report the same game twice, and is then removed from it; the rest of the report stays. The address itself is never stored.
- Live-race connection details (Race the Sky): to start a live race, the two browsers swap connection details through our servers, and these include each browser's network addresses. Each browser deletes its own as soon as the race connects or the attempt is given up; anything left behind (a tab closed mid-handshake) is swept away within about 15 minutes, and nothing in the live lobby's store is kept longer than a day. No other game records network addresses.
- Announcements: a list of the posts @gamethesky.com has made about new games, so it can delete one if the game goes.
- Share-card caches: the image cards for link previews are drawn from public data and cached by our host's network for up to a week or so. Avatars are passed through from Bluesky's image service so the games can draw them; we don't keep copies.
Our host, Netlify, handles every request and keeps its own standard logs under its privacy policy.
Game by game
What each game asks Bluesky for when you sign in, and what its servers keep. Every game writes only its own kinds of record; atproto is the basic permission to know who you are.
| Game | Signing in asks for | Our servers keep |
|---|
| gamethesky.com | No sign-in | Nothing. No cookies, no analytics. |
| gamethesky.com (making games) | atproto, write its games and runs, upload images (PNG, JPEG) and sounds (MP4 audio, WAV) | Boards, the gallery index, moderation lists and reports with hashed addresses, the announcement list, a feed of those announcements, and the studio account's own sign-in |
| Haunt the Sky | atproto, write its runs and houses, upload images (PNG, JPEG) | Boards |
| Fight the Sky | atproto, write its runs and saved fighters, upload images (JPEG) | Boards |
| Sky Vortex | atproto, write its runs, upload images (JPEG) | Boards |
| Sky Tanks | atproto, write its runs, upload images (JPEG) | Boards |
| TRAN: Derezzed | atproto, write its runs | Boards |
| Dept of War | atproto, write its runs | Boards |
| The Epstein Files | atproto, write its runs | Boards |
| Hats Off | atproto, write its runs | Boards, and each player's campaign progress (levels cleared) |
| Drops | atproto, write its runs and courses | Boards |
| Smitten | atproto, write its matches and your Closet | A replay of each live match (players' handles, names, avatars, outfits and moves), deleted after 30 days. More |
| Golf the Sky | atproto, write its rounds and courses | The course shelf (shared courses, their makers' handles and play counts) and a block list. Live rounds are held in memory only. More |
| Race the Sky | atproto, write its runs, courses and team memberships | Boards, tournaments and champions, teams, the course gallery, and live-race lobbies and connection details (including network addresses), deleted once the race connects, within about 15 minutes at most. More |
| SkyRealm | atproto only | Accounts, campaigns, votes and a sign-in cookie; it has its own page |
Signing in with Bluesky
Signing in uses Bluesky's OAuth: you sign in on your own Bluesky server, never on ours, and it shows you exactly what the game is asking for (the table above). We never see your password. The permission is limited to the game's own kinds of record and, where a game takes photos or sounds, uploading those files. A game can't post as you, follow anyone, read your messages or touch anything else in your account. Your sign-in session is kept in your browser. You can revoke a game's access at any time from your Bluesky account settings.
No ads, no tracking
- No advertising, analytics, fingerprinting, tracking pixels or third-party trackers, in any game.
- No cookies, except SkyRealm's sign-in cookie and the ones Bluesky's sign-in sets on its own site.
- We don't sell, rent or share your data with anyone.
Who else is involved
- Bluesky and your repo's host, which store your records and serve profiles and avatars.
- Netlify, which hosts the sites and our server functions.
- Our live servers (Golf the Sky, Smitten, and the bots for Race the Sky and SkyRealm), on our own rented machines.
- Live races in Race the Sky connect players' browsers directly, with Google's public STUN servers helping them find each other, so players can see each other's network addresses.
- The gallery of games people made: most game pages load a small script from gamethesky.com that shows them.
- Stripe, only if you choose to use the coffee link.
Deleting your data
- Your records are yours to delete: remove them from your Bluesky repo (gamethesky.com has a Delete button on your own game page; for anything else, any tool that manages your repo's records will do). Uploaded photos and sounds go with the records that use them.
- Our copies age out. A game whose record is gone drops out of the gallery and its announcement post is deleted. Share-card caches expire within about a week.
- Or ask us. Write to legal@gamethesky.com from, or with proof of, the account concerned, and we'll remove your board entries, gallery entries, reports and anything else we hold about you.
If you're in the EU or UK: we process this data to provide the features you ask for, and you have the rights of access, correction, erasure and objection, and to complain to your supervisory authority. If you're in California or another state with a privacy law: we don't sell or share personal information, and you can ask us what we hold and have it deleted.
Children
The games aren't directed at children under 13, and signing in needs a Bluesky account, which has its own age rules. If we learn that a child under 13 has given us personal information, we'll delete it. Photos of children are never allowed in anything violent or adult; see the Content Policy.
Changes and contact
If this policy changes, we'll update the date at the top. Questions or requests: legal@gamethesky.com, or @gamethesky.com on Bluesky.