Privacy policy

Last updated 11 August 2026

Introduction

SkyLander is made by Molehill Creations, and "we" below means us. This policy covers the Garmin Connect IQ app and this website: what they collect, why, who else sees it, and how long it is kept.

What we collect

Pilot stats and mission data

When you sync your pilot stats or complete missions, we collect:

• Device ID: a unique identifier from your Garmin device
• Pilot stats: your credits, missions completed, distance travelled, cargo delivered, and current station
• Mission data: mission type, stations, cargo details, and completion status
• Device information: your watch model, screen resolution, and app version
• Location data: your country (derived from IP address for leaderboard purposes)
• IP address: used for rate limiting and fraud prevention
• Timestamp: when data was synced or missions were completed

Licence activation

When you activate a Pro licence, we collect:

• User ID: your Garmin device identifier
• Device information: watch model and device details
• Licence code: the activation code you entered

Payment information

We use Stripe for payment processing. We do not store your credit card information. Stripe may collect:

• Payment card details
• Billing address
• Email address (for licence code delivery)

Website analytics

We use Umami, a privacy-focused analytics tool that we host ourselves on our own server. It records aggregate visit information so we can see which pages are useful:

• Page visited, and the site you arrived from
• Browser, operating system, device type, and screen size
• Country (derived from IP address; the IP itself is not stored)

Because the analytics run on our own infrastructure, this data is never sent to a third-party analytics provider. No advertising cookies are set, no data is used for advertising, and you are not tracked across other websites. Visits are counted using a hash that resets daily, so visitors cannot be identified or followed over time.

How we use it

We use the collected information to:

• Display your pilot stats on public leaderboards
• Validate and activate Pro licences
• Prevent fraud and abuse
• Work out which parts of the game people actually use
• Process payments and deliver licence codes
• Provide customer support

Who else sees it

We do not sell your personal information. We share data only in these cases:

• Public leaderboards: your scores, User ID (truncated), country, and device info are publicly visible
• Payment processing: payment data is processed by Stripe according to their privacy policy
• Legal requirements: when required by law or to protect our rights

How long we keep it

• High scores: kept indefinitely, because the leaderboards are permanent
• Licence data: kept for the lifetime of the licence
• Rate limit data: deleted automatically after 24 hours
• Login attempts: deleted automatically after 24 hours

Your rights

You have the right to:

• Request access to your data
• Request deletion of your scores (contact us)
• Opt out of leaderboard participation (don't submit scores)
• Request correction of inaccurate data

Data security

We implement security measures including:

• HMAC signature verification for API requests
• Rate limiting to prevent abuse
• Encrypted connections (HTTPS)
• Secure password storage
• Regular security updates

Children's privacy

SkyLander is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe we have collected data from a child under 13, please contact us.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top says when. Continued use of SkyLander after changes constitutes acceptance of the updated policy.

Contact us

If you have questions about this Privacy Policy or want to exercise your rights, please use our contact form or email us at:

Email: support@skylander.div.nz

Third-party services

• Garmin Connect IQ: subject to Garmin's privacy policy
• Stripe: subject to Stripe's privacy policy
• IP geolocation: we use ip-api.com for country detection (free tier, no data sharing)

Website analytics are not a third-party service. They run on our own self-hosted Umami instance, as described above.