Aero Aero

Privacy Policy

When you use Aero, you trust us with your information. This page explains what we collect, why we collect it, and how you stay in control of it.

Pixel Development Group ("Aero", "we") runs the Aero platform at aeroengine.org and is responsible for your personal data. If you have any questions about anything in this document, please refer to [email protected] or the support form at https://aeroengine.org/support. Aero's website and game servers are hosted directly by Aero, which resides within the United States.

Aero is currently invite-only while in private testing.

Who can use Aero

Aero is for people 13 and older

Aero is intended for people 13 and older, and we do not knowingly collect personal information from children under 13. Signing up does not ask for your age. If we learn that an account belongs to a child under 13, we delete the account and the data tied to it. If you are a parent or guardian and think your child under 13 has an Aero account, write to [email protected] and we will act on it promptly.

If you are 13 to 17

Teens get the same rights as everyone else in this policy. We do not show advertisements to anyone. We do not sell or share anyone's personal data, and we do not use it to build advertising profiles. Privacy mode, which masks your email address and IP where they would otherwise appear, is available to every account in Settings, but it stays off until you turn it on.

In some countries, people under 16 (or another local age) need a parent's permission to use an online service like Aero. Because signing up does not ask for your age, Aero cannot tell which accounts need that permission. If your country requires it, please get your parent's permission before signing up.

Parents and guardians can write to [email protected] to ask about a teen's account.

How we check age

Aero does not use ID checks or face scans to check age, and signing up does not ask for your age. If that changes, we will update this policy before we start, and explain what we collect, who processes it, and how soon it is deleted.

Information Aero collects

We want you to understand what we hold about you

What we collect depends on how you use Aero. An account holds your profile. Signing in records your session. Filing a ticket records what you wrote. None of it is sold, shared for advertising, or handed to brokers, and Aero shows no advertisements.

Things you give us

Creating an account gives us your username, email address, and password. Passwords are stored as salted hashes, never as readable text. Turning on two-step verification adds your authenticator secret and hashed backup codes, or the public half of your passkeys. Private keys never leave your devices.

Support tickets hold whatever you put in them. Email, username if you give one, category, subject, the thread, and up to 5 attached files of 10 MB each. Anonymous tickets are allowed. Purchases and payments tickets and creator and developer support tickets need a signed-in account so we can match them.

What other people can see

Most of your account stays private: your email address, sessions, tickets, and password are visible only to you in Settings, and to staff where they need them to run the service and answer tickets. Your public profile remains public to anyone. Anyone can see your username, bio, badges, and join date, and anyone can find you by searching your username. Your friend list is stored so the site can show it to you, profiles display a friend count to anyone, and friend requests are visible only to the two accounts involved. Your online status follows your presence setting. When you have a place open in Studio, Studio tells the site so it can show that you are creating, and the place's name, to whoever your presence setting allows. This stops when you close the place or Studio. Past usernames stay listed on your profile; names removed by moderators appear masked to other players. Your password is never shown to anyone, and privacy mode masks your email address and IP in the few places they would otherwise appear, such as your own device list.

Things collected as you use Aero

Sign-in sessions, remembered devices, installer authorizations, IP addresses, browser details, and one-time verification codes. New sign-in locations trigger an email alert to verified addresses. Rate-limit counters sit apart from accounts on purpose and cannot be traced back to you. Your theme, accent, and motion choices never leave your own browser.

Why Aero collects data

Each kind of data does a specific job

Run the service

Accounts, logins, sessions, and tickets exist so you can sign in, play, build, and get help. Without them there is no service.

Keep it safe

Sessions, device records, IP addresses, and rate limits exist to spot stolen logins and stop brute-force attempts. Connected-app grants exist so approved apps act only with your permission.

Answer safety reports

Safety and abuse tickets exist so reports of rule-breaking reach us and we can act on them.

Answer support

Ticket contents exist so a human can read your problem and reply to it.

Some records exist because the law asks for them, such as keeping enough to answer regulators and enforce the rules.

Connected-app access rests on your consent when you approve it, and you can withdraw that consent anytime in Settings.

  • Running the service, support, and your account: it is needed to provide Aero to you (contract).
  • Security and safety reports: our legitimate interest in keeping Aero and its players safe.
  • Legal duties and child-safety reporting: a legal obligation.
  • Connected apps: your consent.

Your privacy controls

Change things yourself, right in your account

Go to Privacy Settings

Edit your username and email. Toggle privacy mode, which masks your address and IP in places other people could see. Review connected apps, narrow what each may do, or disconnect one outright. See and revoke signed-in devices. Delete your entire account, which removes the account, sessions, keys, and tickets with it.

Anything beyond that, including a copy of your data or a correction, goes through a privacy ticket on the support form or an email to [email protected]. We answer within 30 days, and the same address handles appeals.

Sharing your information

The short version: we do not sell or share your data, and processors only do their jobs

We do not sell your personal data, we do not share it for advertising, and Aero has no advertisements.

Our mail relay delivers password resets, verification codes, and ticket mail. Cloudflare fronts our traffic and routes ticket replies. Both see only what their job needs. We host the website and game servers ourselves, in the United States.

The site's fonts ship with the site, so pages make no third-party requests at all.

We share personal data beyond that only for legal reasons such as answering enforceable requests, enforcing the rules, stopping fraud and abuse, or protecting people from harm.

That includes reporting serious child-safety concerns, such as apparent child sexual abuse material or attempts to exploit a child, to law enforcement and to the National Center for Missing & Exploited Children (NCMEC), as the law requires. For that purpose we may review and hand over relevant account details and ticket information.

Keeping your information secure

Security is built into how Aero signs you in

Traffic runs over TLS. Passwords and codes are hashed. Sensitive actions ask you to prove it is you again first. Access to personal data is limited to what each job needs. No system is perfect, so if personal data is ever exposed in a breach we will tell affected users by email as the law requires.

Deleting your information

Removal is a button, with a few exceptions we spell out

Delete your account in Settings and the account, sessions, keys, and tickets go with it. Disconnecting a connected app signs its sessions out on the spot.

A few things work differently:

  • Rate-limit counters sit apart from accounts on purpose and cannot be traced back to you; they are pruned after a day.

For anything else, including data a copy request turns up, file a privacy ticket or email [email protected] and we handle it within 30 days.

Retaining your information

Different data lives for different lengths of time

  • Account data stays until you delete the account.
  • Sessions last 12 hours, or 30 days if you asked to be remembered.
  • Remembered devices expire after 180 days, installer authorizations after 365 days, and verification codes after 10 minutes.
  • Rate-limit records are pruned after a day.
  • Closed support tickets are deleted 90 days after closing, attached files with them.
  • IP addresses live as long as the sessions that recorded them, and rate-limit records are pruned after a day.

Where your data is stored

Aero runs on our own servers

Aero's website and game servers are hosted by us in the United States. If you use Aero from another country, your information travels to and is stored there.

By using Aero from outside the United States, you understand your information will be processed there, where data-protection laws may differ from yours. We apply the protections in this policy to your information wherever it travels.

Compliance

Your rights, no matter where you live

We give everyone the rights below, wherever they live, and we follow the privacy laws that apply to us, including the EU GDPR and UK GDPR, Switzerland's FADP, Canada's PIPEDA and Quebec Law 25, South Africa's POPIA, Australia's Privacy Act, New Zealand's Privacy Act 2020, the Children's Online Privacy Protection Act, and U.S. state privacy laws including those of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

You can ask what we hold about you, correct it, delete it, take a copy of it, object to certain uses, and withdraw consent you gave. Parents and guardians can ask about a teen's account. File a privacy ticket or email [email protected] and we answer within 30 days. If you disagree with a decision, the same address takes your appeal, and you can always take a complaint to your local data protection authority.

We do not sell or share personal data and we do not use it for targeted advertising, so there is nothing to opt out of.

About this policy

What it covers, and when it changes

This policy applies to Aero accounts, the website, the Aero apps (client, Studio, and server software), the installer, and support.

If it changes, the new version appears here with a new effective date. For significant changes, we also email account holders at least 14 days before they take effect. Earlier versions are available on request at [email protected].

Aero has no purchases or creator payouts. Before they launch, we will update this policy to name who processes payments and what payout information we collect. We will also review it before Aero opens beyond private testing.

Reach out to us through [email protected] or the support form for any questions.