Privacy Policy

RoFlightTracker24 ("we", "us") runs roflighttracker24.com, its API and the Roblox Studio plugin. We are the controller of the personal data described here. You can reach us through support.

This policy covers the website, the dashboard and the tracker that game creators add to their Roblox games.

When you just browse. Our servers see your IP address and browser details because every web request carries them. We use them to deliver the page and to stop abuse, and we don't build a profile from them.

When you sign in. Sign-in is through Discord. Discord tells us your user ID, username, avatar and email address. We never see your Discord password.

When you link Roblox. We store your public Roblox user ID and username, and for airlines the Roblox group you connect, so we can check that you own the games and groups you add.

When you run an airline. Everything you enter in the dashboard: airline name and branding, fleet, schedules, staff roles, events, codeshares and settings.

When a tracked plane flies. The tracker in a Roblox game sends the aircraft's position, altitude, speed, heading, flight number, aircraft type, the game it's in and the airports it flies between. It does not send chat, inventory or anything else about the players on board.

When you upload an image. Logos, aircraft photos and banners. We re-encode every image before storing it, which also strips hidden metadata such as camera details and GPS location.

When you pay. Card payments go straight to Stripe. We receive whether the payment succeeded, the amount and a reference, never your card number.

• To run the service: show flights, keep you signed in, save your airline's data. The legal basis is our agreement with you (GDPR article 6(1)(b)).
• To keep it safe: rate limits, spotting abuse, checking game ownership and keeping logs for a short time. The basis is our legitimate interest in a working, secure site (6(1)(f)).
• To improve it: product analytics, only with your consent (6(1)(a)).
• To follow the law, for example bookkeeping rules for payments (6(1)(c)).

We don't sell personal data, share it with advertisers, or use it for automated decisions about you.

Live and past flights, airline profiles, fleet and schedules that an airline publishes, and names on the Team page are visible to everyone. Your email address, Discord ID, API keys and private airline settings are never shown to other people.

If you're a player flying in someone else's game, the flight appears under that game's airline, not under your Roblox name.

We need a small amount of browser storage to keep you signed in and remember choices like the map style and theme. That is always on, because the site can't work without it.

Everything else asks first. Consent is handled by Cookiebot. If you agree to statistics, we use PostHog to count page views and clicks and, sometimes, to record a session replay so we can find bugs. Text you type into forms is masked in those recordings. You can change your choice any time on the cookie page.

These providers process data for us, under contracts that require them to protect it:

• Cloudflare, which serves the website and stores uploaded images.
• Our database and API servers, hosted in the European Union.
• Discord for sign-in and, if an airline turns it on, posting to its Discord server.
• Stripe for card payments.
• PostHog for analytics, only with consent.
• Cookiebot for consent management.
• Google AdSense for ads, see Advertising below.

Some things on the map load straight from other services into your browser, which means they see your IP address: map imagery from Google and OpenFreeMap, airport photos from Wikipedia and weather from Open-Meteo. We send them nothing about you. Airport and runway facts come from OurAirports and are served by us.

Where a provider is outside the EU, the transfer is covered by the EU Standard Contractual Clauses or an adequacy decision.

RoFlightTracker24 shows ads to pay for running the site. Some are from sponsors who book them with us directly, and some are served by Google AdSense.

Third party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visit to our site and/or other sites on the Internet.

You can opt out of personalised advertising in Google's Ads Settings, and out of other vendors' use of cookies for personalised advertising at www.aboutads.info. How Google uses information from sites that use its services is explained at policies.google.com/technologies/partner-sites.

In the EU, the UK and Switzerland, ads are personalised only if you agree in the cookie banner; otherwise Google shows ads that don't use your browsing history. Sponsor ads we book ourselves never use cookies to follow you; we only count how many times each one is seen and clicked.

• Account data: until you delete your account.
• Airline data: until the airline is deleted by its owner.
• Flight history: kept so flights can be replayed, and removed with the airline that flew them.
• Server logs: a few weeks at most.
• Payment records: as long as Swedish bookkeeping law requires, currently seven years.

Under the GDPR you can ask us to:

• give you a copy of your data, in a format you can take elsewhere;
• fix anything that's wrong;
• delete your account and the data tied to it;
• stop or limit some processing, or object to it.

Open a support ticket while signed in to your account and we'll answer within 30 days. If you think we've handled your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY) or the authority where you live.

Many Roblox players are young, so we collect as little as we can. Accounts are for people aged 13 or older, which is also Discord's minimum age. If you think a child under 13 has given us personal data, tell us and we'll delete it.

Traffic is encrypted, database access is restricted per row and per column, secrets such as API keys are hidden from the public API, and uploads are checked and re-encoded before they're stored. No system is perfect; if something goes wrong that affects you, we'll tell you and the authorities as the law requires.

If we change how we handle your data, we'll update this page and the date at the top. For bigger changes we'll also tell you on the site or in Discord before they apply.