Who we are
Glider on this website is operated by the publisher of glider.funplaylab.com. We are the controller of personal information processed to operate this site.
For privacy questions or requests, email support@glider.funplaylab.com.
This notice covers the Glider website and its game features. A save code is a persistent identifier; we do not assume information is anonymous simply because we do not ask for a name.
Your progress
On your device
Glider uses browser storage to remember your coins, unlocked and equipped gliders, designs, personal bests, flight counts, rewards, selected world and settings. It also remembers whether you have completed the touch tutorial. The browser can cache game files and fonts so you can play offline.
When you choose cloud saves
Creating or restoring a cloud save sends your game progress and settings to our save service. We store them with your save code, a server-side PIN hash, creation and update times, a revision number, and information needed to limit incorrect PIN attempts.
Your browser remembers the code and PIN so progress can sync automatically when you return and while you play. The save service receives the PIN to check access; the save record stores a hash rather than the original PIN. We do not require your name, email address or date of birth to create a save.
Keep your code and PIN private. Anyone who has both can access and change that save. Please do not include your PIN in an email to us.
Previous coin purchases
Glider is free to play and new coin-pack sales are paused. Existing purchased balances and unlocks stay with their cloud save. We retain previous pack prices, payment references, transaction times, refunds and dispute status for accounting and payment support. Your browser may cache the remaining purchased balance.
Stripe processed previous payments and may retain payment details, name, email, billing address and connection information. We can access transaction and customer details through Stripe to provide receipts, resolve payment issues and meet accounting obligations. We also keep the name and email supplied at checkout with completed purchases in our private payment records, so we can find transactions and provide support. Our game does not receive or store your full card number or security code. We send Stripe an order reference and the selected pack, never your cloud-save code or PIN.
Analytics & connections
The homepage shows the total distance explored by all players, including guests. During a flight, the game sends a random identifier for that flight, its start time and the metres travelled to this website. These reports do not contain a save code, PIN or player identifier. Your device keeps the latest total and a temporary queue of unsent reports so it can retry after a lost connection without counting twice.
We also use distance records already held in cloud saves to establish the shared total's historical starting point. Each save contributes its recorded distances once; restoring it on another device does not count those records again. Only the combined total is shown publicly.
When a returning guest has older progress that has not already encountered distance tracking or cloud sync, the game can add the combined distance of their saved personal bests once. It sends only that distance and a random import receipt, not their full game save. The browser remembers the decision and receipt so later visits, new records and connection retries do not repeat the import.
This website does not load a third-party analytics script. The Share usage statistics switch, Do Not Track and Global Privacy Control remain in Settings for when a first-party statistics endpoint is turned on. Until then, the site does not send visit or gameplay events to an analytics host.
If the game hits an error, the website sends a short technical report to our hosting provider's logs: the error message and stack trace, the page path, the game version and your browser's user-agent string. Reports never include your save code, PIN or progress, and at most five are sent per visit.
The website serves its own fonts. Requests to this website disclose connection information, such as an IP address and browser details, to the host that receives them. Hosting and security services may keep technical request logs.
Why we use information
We use progress and settings to run the game, remember your choices and provide the cloud synchronisation you request. Technical information helps us deliver the website, investigate faults and prevent misuse. Analytics helps us understand which features work well. If you contact us, we use your email address and the information you send to respond.
Where UK or EU data-protection law applies, operating and securing the service, responding to ordinary support enquiries and improving the game rely on our legitimate interests in those activities, subject to a balancing assessment. Handling a legal obligation, including applicable data-rights requests, may instead rely on that obligation.
Processing a purchase and delivering its coins is necessary to perform the purchase contract you request. Accounting records are kept to meet legal obligations. Payment security and investigating disputed transactions also serve our legitimate interests in protecting players and the service.
Our service providers
- CloudflareServes the website, stores music and world art, and receives error reports in its logs. Privacy policy.
- Our databaseWhen cloud saves are enabled, holds save snapshots, PIN checks and the shared flight-distance total on infrastructure we operate. The shop is off, so this site does not send payment card data.
- StripeWould host optional coin checkout if sales return. Sales are paused, and this site does not open a Stripe checkout. Stripe's privacy information.
Our communications providers also handle messages you send us. We may need to disclose relevant information to comply with a legal requirement or protect the service.
Suppliers may use infrastructure or support teams outside your country. Their published processing terms describe the safeguards they use for those transfers.
Keeping & deleting data
On your device: progress and remembered cloud credentials remain until you clear the site's storage, the browser removes it, or the game replaces that information. Cached game files can also be removed through your browser's site-data controls.
Cloud saves: there is currently no automatic expiry. Starting a new game creates a new save and keeps the previous cloud save available through its old code and PIN. Clearing browser storage does not delete the copy held by the cloud-save service.
Purchases: purchased balances and unlock records remain linked to their original save, including after starting a new game. Purchase records currently have no automatic expiry. Records needed for company accounting must normally be retained for six years from the end of the relevant financial year, and sometimes longer. We may also need records to maintain an active coin balance or resolve a dispute. A deletion request does not remove records we must retain by law.
Use Delete cloud save in the save dialog, or open the deletion flow here. Restore the save with its code and PIN if necessary, then confirm deletion. This permanently removes the cloud profile, its PIN hash, progress, designs, unlocks and remaining coin wallet, and resets this device. Other devices lose access to that cloud save; copies already stored on those devices may remain locally. Deletion does not automatically refund payments. Required financial records remain as described above. For help, contact support@glider.funplaylab.com without sending your PIN.
A deletion receipt records a random request identifier, a hash of the save code and the deletion time, so a lost response can be retried safely. It contains no PIN or saved progress. Receipts become eligible for removal after 30 days and are removed in bounded batches during later deletion requests.
Our public distance endpoint processes the caller’s IP address into a keyed hash to enforce request limits. Its rate-limit table stores that hash, a time window and a request count, not the raw IP address. Old counters become eligible for removal after ten minutes and are removed during later requests. This does not change the aggregate distance or identify individual flights.
Shared flight distance: reports can be retried for up to 30 days. Individual flight receipts become eligible for removal after 31 days and are cleared in batches as new reports arrive. We retain the combined total and hourly distance totals for activity reporting; these totals contain no player identifiers. On your device, successfully sent reports are removed from the queue; expired reports are discarded when the game next checks it. The queue is limited to 512 flights, and the cached total remains until replaced or your site's storage is cleared.
Receipts for one-time imports of older guest records remain while we retain the shared statistic, so an old retry cannot count twice. These contain a random receipt, the imported distance and the import time. Your browser keeps its import decision and receipt until its site storage is cleared.
Your choices & rights
You can play using local progress without creating a cloud save. Browser storage controls let you remove local game data. If you reopen the game after clearing site data, you will need your code and PIN to restore a cloud save.
Depending on the circumstances and applicable law, you may request access to your personal information, correction, deletion, restriction or portability.
You can turn analytics off. Switch off Share usage statistics in the game's Settings, or turn on Do Not Track or Global Privacy Control in your browser. While no analytics endpoint is configured, there is nothing further to send. Error reports and the community distance total are not affected.
You can object to processing based on legitimate interests. Contact support@glider.funplaylab.com to exercise your rights or raise a concern. We may need to verify your request, and some rights are subject to exceptions. You do not have to create a named account just to play.
You can also complain to a data-protection authority where you have that right.
Children & parents
The game does not ask players to enter their age, real name or email address. Children, parents and carers can contact us with privacy questions or requests about a child's information. Avoid sending unnecessary personal details in a support message.
Changes to this notice
We will update this page when how we handle information changes, and bring material changes to players' attention where required. The date at the top shows when this notice was last updated.