Privacy policy

Sky Peck is made by IFC LLC ("we", "us"). This policy explains what data the Sky Peck game and the skypeck.fun website collect, why, who we share it with, and the choices and rights you have. It applies to the website, your account, and the game's online features (licensing and leaderboards).

The short version: camera data never leaves your device — pose detection runs locally, and any flight clips you choose to record are saved only on your device; kids don't get accounts; there are no ads, no analytics, and no trackers; we keep only what we need to sell you a license, run the game, and send you email you've agreed to.

The camera stays in your room

Sky Peck uses your device's camera to detect body poses — spread arms, leaning, flapping — so kids can fly. All pose detection runs entirely on your device, and the game never transmits any camera or pose data anywhere. The game's only network traffic is license checks, and — only if a parent opts in — leaderboard scores.

The game does include an optional recording feature: you can choose to record a video clip of your own playthrough. Recordings are saved only on your device — the game has no upload feature of any kind, and we never receive, see, or store them. What you do with a recording afterwards (keeping it, deleting it, sharing it somewhere yourself) is entirely your choice and happens outside the game. Since clips can show your child and your room, share them as thoughtfully as you would any home video.

What we collect

We collect data in a few specific places, and nothing beyond it. We do not collect precise location, contacts, camera or microphone recordings, advertising identifiers, or browsing history.

Account data

• Your email address, display name, and a hashed password (we cannot read the original). During beta, the invitation code you signed up with.
• Sign-in sessions, which include the session's IP address and browser user-agent string — kept for security, so unusual sign-ins can be detected and sessions can be revoked.

Purchase data

• Order details: amount, currency, date, payment status, any discount code used, and Stripe's identifiers for the payment. Your card number, billing address, and full payment credentials go directly to Stripe and never touch our servers.
• If you arrived via a partner referral link, the referral code attributed to your order (see Cookies below).

License and device data

• Your license key and status, and — for each activated device — a device identifier generated by the game, the device's name and platform (e.g. "Living-room Mac, macOS"), and activation / last-seen timestamps. We use this to enforce the 5-device limit and let you manage devices from your account.

Leaderboard data (opt-in only)

• If — and only if — leaderboard upload is enabled from the parent account: a nickname you choose, a level identifier, and a score. Nothing else. Nicknames are displayed publicly, so pick one that isn't a real name.

Email subscriptions

• Which marketing topics (news, offers) you have confirmed, and private tokens that make your confirmation, unsubscribe, and preference links work without logging in.
• Proof that you asked. We never add an address to a list without a click, and we keep the evidence of that click: when the subscription was requested and confirmed, the IP address and browser user-agent it was confirmed from, and which page asked. This is what lets us show a subscription was genuine if it is ever disputed.
• Clicks in marketing email. Links in our marketing mail point at skypeck.fun and redirect onward, which records that your subscription clicked that link, when, from what IP address and user-agent. We use it to see which content is worth writing. We do not use tracking pixels, so we do not know whether you opened a message — only whether something in it was clicked. Transactional mail, confirmation links, and unsubscribe links are never tracked this way.

Server logs

• Like nearly every website, our servers keep short-lived technical logs of requests (IP address, URL, timestamp) for security, debugging, and abuse prevention.

Cookies

We use only these first-party cookies, and no third-party ones:

• Session cookie — keeps you signed in. Essential; set when you log in; removed when you log out or it expires.
• Referral cookie (skypeck_ref)— set only if you follow a partner referral link (skypeck.fun/r/…). It remembers the referral code so that if you buy, the partner who referred you gets credit. By default it lasts only for your current visit; a small banner asks whether we may keep it for 30 days, and it's extended only if you say yes. It doesn't track you across other sites, doesn't change your price, and isn't shared with anyone. You can delete it in your browser at any time.
• Referral choice cookie (skypeck_ref_choice)— set only after you answer that banner, so we remember your answer for 30 days and don't ask again. If you decline, the referral cookie is removed and won't be set again while your "no" is remembered.

There are no analytics, advertising, or social-media cookies, and no tracking pixels. Fonts and all other assets are served from our own domain — visiting this site sends no requests to Google, Meta, or any ad network.

How we use your data

• To provide the Service (contract): accounts, purchases, license issuance, device activation, offline tokens, and — where enabled — leaderboards.
• To send transactional email(contract): receipts, license delivery, verification and password-reset messages. These always send, because the service doesn't work without them.
• To send marketing email (consent): news and offers, sent only to addresses that confirmed by clicking a link we emailed them, each message with a one-click unsubscribe. Measuring which links get clicked rests on that same consent. Manage topics anytime at /email/prefs.
• To keep the Service safe (legitimate interest): fraud and abuse prevention, security monitoring, enforcing device limits, and moderating the leaderboard.
• To meet legal obligations: tax and accounting records for purchases.

We do not use your data for advertising, we do not build profiles, and we do not use automated decision-making that has legal effects on you.

Who we share data with

We never sell or rent personal data, and we don't share it for advertising. Data is shared only with the service providers that run Sky Peck, under their standard data-protection commitments:

• Stripe, Inc.— payment processing. Stripe receives your email and payment details when you check out and acts as its own controller for payment data. By paying for any service you agree to Stripe's Consumer Terms of Service and Privacy Policy, and your payment data is handled under them.
• Amazon Web Services — hosting (servers and database in AWS US regions) and email delivery (Amazon SES). AWS processes data on our behalf as our hosting provider.

Beyond that, we would disclose data only if legally required (for example a valid court order), to protect the safety or rights of our users, or — if IFC LLC is ever acquired or merged — to a successor who takes over these commitments. If any of that ever happens, we'll tell you where the law allows.

Kids and COPPA

Sky Peck is a game for kids, but the online parts are built for parents. Children do not create accounts, and we do not knowingly collect personal information from children under 13 (or the equivalent age where you live). Specifically:

• Accounts, purchases, and all settings belong to a parent or guardian.
• Device activation is approved from the parent's phone or computer, behind a parental gate.
• Leaderboard upload is off by default and can only be enabled from the parent account. Even then, only a parent-approved nickname, a level, and a score are uploaded — no names, photos, voice, location, or contact information, ever.
• The game itself works fully offline and sends nothing beyond the license and leaderboard features described above. Playthrough recordings, if you make them, stay on the device — the game cannot upload them.

If you believe a child has submitted personal information to us (for example a real name used as a nickname), email hello@skypeck.fun and we will delete it promptly. Parents can also review or disable anything their family has submitted from their account.

How long we keep data

• Account, license, and device data — for as long as your account exists. Deleting your account removes it, except as noted below.
• Order records — kept as long as tax and accounting law requires, even after account deletion.
• Sign-in sessions — until they expire or you sign out; expired sessions are purged.
• Device-pairing codes — minutes; they are single-use and expire in about 10 minutes.
• Leaderboard scores — until you remove them, ask us to, or the leaderboard is reset.
• Server logs — short-term, on a rolling basis.
• Marketing opt-outs— kept indefinitely, so we don't accidentally email you again.
• Subscription and consent records — for as long as the subscription lasts, and after you unsubscribe, so we can show the address had asked and when it stopped.
• Marketing email click records — deleted with your subscription when you delete your account.

Security

All traffic to skypeck.fun is encrypted with TLS. Passwords are stored only as salted hashes. Our database is encrypted at rest, and production credentials live in a managed secrets store with restricted access. License tokens are cryptographically signed so they can't be forged. No system is perfectly secure, but if a breach ever affects your personal data, we will notify you as the law requires.

Your rights and choices

You can, at any time:

• Access, correct, or delete your data. You can delete your account yourself from your account page, or without signing in from the account deletion page. You can also email hello@skypeck.fun from your account address and we'll handle it for you.
• Export a copy of your data in a portable format, on request.
• Turn leaderboard uploads off, remove devices, and manage your family's data from your account.
• Unsubscribe from marketing with one click in any marketing email, or at /email/prefs.

If you are in the EEA, UK, or Switzerland, these correspond to your GDPR rights (access, rectification, erasure, restriction, portability, and objection), our legal bases are noted in "How we use your data" above, and you may also complain to your local data-protection authority. If you are a resident of California or another US state with a privacy law: we do not sell or share personal information as those laws define it, and we honor access, deletion, and correction requests as described above, without discriminating against you for making them. We respond to verified requests within the time the applicable law requires.

Deleting your account

You can permanently delete your account and personal data at any time — from your account page while signed in, or from the standalone account deletion page without signing in (we email a link to confirm the request is really yours). Deletion removes your login, email, profile, paired devices, and leaderboard scores, and revokes any licenses — the game falls back to free demo mode on your devices, and never deletes the game or your local save data.

One exception, for legal reasons: we keep the record of any purchase (amount, date, and Stripe's payment identifiers) for as long as tax and accounting law requires, but we remove your name and the link to your deleted account, so what remains is an anonymized financial record rather than personal data.

Where data is processed

Our servers run in Amazon Web Services regions in the United States. If you use Sky Peck from outside the US, your data is transferred to and processed in the US. Where GDPR applies, transfers to our processors rely on recognized safeguards such as the EU–US Data Privacy Framework and standard contractual clauses maintained by those providers.

Changes to this policy

If we change what we collect or how we use it, we'll update this page and its date, and for material changes we'll email account holders before the change takes effect. We will never retroactively loosen how data you already gave us is handled without asking you.

Contact

IFC LLC (Investment Fidelity Company LLC), a Florida (USA) limited liability company, operates Sky Peck and is the data controller for the data described here. For any privacy question or request: hello@skypeck.fun.

Last updated: July 16, 2026