Privacy Policy

Last updated: 2 November 2026

1. 1. Who we are
2. 2. What we collect
3. 3. Signing in with Google, Facebook or Apple
4. 4. How we use your data, and on what legal basis
5. 5. What other players can see
6. 6. Who helps us
7. 7. Data outside the EU
8. 8. Cookies and local storage
9. 9. How long we keep data
10. 10. Your rights
11. 11. Deleting your account
12. 12. Children
13. 13. Security
14. 14. Changes to this policy
15. 15. Contact

1. Who we are

Skyline Topia (the website skylinetopia.com and the game played there) is operated by:

Millstone
Acacialaan 18, 2282 AX Rijswijk, the Netherlands
Chamber of Commerce (KvK) number: 89795857
E-mail: info@skylinetopia.com

Millstone is the controller for the personal data described in this policy, as meant in the EU General Data Protection Regulation (GDPR). In this policy, "we", "us" and "our" mean Millstone, and "you" means anyone who visits the website or plays the game.

2. What we collect

Your account

• Your e-mail address, and your password. The password is stored in hashed form by our sign-in provider; we cannot read it.
• When your account was created, whether you confirmed your e-mail address, and when you last signed in.
• Technical sign-in data kept by our sign-in provider for security, such as your IP address, browser type and session times.

Your game

• Your city: buildings, roads, progress, items, currencies (coins, Diamonds, tokens, medals) and settings saved with it.
• Your mayor name and avatar, if you choose them, and when you were last active.
• Game scores for the leaderboards: level, XP, population, home upgrades, goods produced, deliveries, flights, repairs and Epic Projects.
• Chat messages you send, with the time and the channel (global chat, your neighbourhood or a private conversation).
• Notifications we show you in the game, such as news.

Purchases

If you buy Diamonds or another pack, we keep what you bought, the price, the time and whether it was paid. The payment itself is handled by Stripe (see section 6): we never receive your card or bank details.

When you contact us

If you e-mail us, we receive your e-mail address and what you write, and use it only to answer you.

Website visits

When your browser loads the website or the game files, our hosting and storage providers see your IP address, browser and device type and the time of the request. They keep this in short-lived server logs for security and to fix problems. We do not use it to build a profile of you.

We do not collect your location, contacts, photos or any special categories of personal data.

3. Signing in with Google, Facebook or Apple

If you choose "Continue with Google", Google tells us your e-mail address, your name and the address of your profile picture, so we can create or open your account. We do not get your Google password and we do not get access to anything else in your Google account. What Google does with the sign-in is covered by Google's privacy policy.

If you choose "Continue with Facebook", or link Facebook to your account in your profile, Facebook (Meta) tells us your Facebook user ID for this game, your name, your e-mail address and the address of your profile picture (the permissions public_profile and email). We use them only to create or open your account and to send you account e-mails. We do not get your Facebook password, your friends, your posts or anything else from your Facebook account, and we never post on Facebook for you. What Meta does with the sign-in is covered by Meta's privacy policy. You can remove the game's access at any time in Facebook under Settings > Apps and websites; to delete your data with us, see section 11.

If you choose "Continue with Apple", Apple tells us a user ID for this game and your e-mail address, or a private relay address if you chose "Hide My Email" (Apple forwards our account e-mails to you). Apple may also share your name the first time; we do not keep it (you choose your mayor name in the game). To be able to end the sign-in link when you delete your account, we keep a token from Apple for your account; it is removed when you delete your account, and we then ask Apple to remove Skyline Topia from "Sign in with Apple" in your Apple Account. What Apple does with the sign-in is covered by Apple's privacy policy.

Playing on Kongregate

You can also play Skyline Topia on Kongregate (kongregate.com). There you never sign up with us: no email address and no password. Only players signed in to Kongregate get a city; a guest sees a page that asks to register or sign in with Kongregate.

• Signed in with Kongregate: Kongregate gives the game your Kongregate user ID, username and a sign-in token for this game. Our server checks the token with Kongregate and keeps the user ID and username with your city, so you find the same city wherever you sign in to Kongregate. The token itself is never stored. Your username, made to fit our name rules, becomes your mayor name when it is free; you can change it like any mayor name. We do not receive your Kongregate password or email address.
• Everything else is as for any city: your game data (above) and what other players can see (section 5), the chat included.
• No trackers from us: on Kongregate we load no Google Analytics, Meta Pixel or other trackers, show no ads of our own, set no cookies and send no emails or push notifications. Kongregate runs its own website and software, including the ads around the game, under its own privacy policy and is responsible for what it collects.
• Purchases with Kreds: on Kongregate you can buy Diamonds, packs and passes with Kreds, Kongregate’s own currency. Kongregate sells the Kreds and runs the purchase window under its own privacy policy; we never see your payment details. We receive and keep: what you bought, its price in Kreds, the dates, your Kongregate user ID and Kongregate’s reference for the purchase (the item’s ID), linked to your account. We check every purchase with Kongregate before your city gets it.
• Deleting your city: email info@skylinetopia.com with your mayor name and your Kongregate username, and we delete your city and the data linked to it.

4. How we use your data, and on what legal basis

We do not send marketing e-mails. Chat messages are checked automatically for links and rude words before they are posted; such a message is simply not sent, and you see why. This check has no other consequences and we make no other automated decisions about you.

5. What other players can see

• Your mayor name, avatar, level and game scores on leaderboards, in neighbourhoods and next to your chat messages.
• Your chat messages in global chat (all signed-in players), in your neighbourhood (its members) and in private conversations (only the other player).
• Other players never see your e-mail address.

Choose a mayor name that does not reveal who you are if you prefer to stay private.

Translating a chat message: “Translate with Google” next to a message opens Google Translate in a new tab with that message’s text and your game language. The text goes to Google only when you choose to translate it, under Google’s privacy policy; we send nothing to Google ourselves.

6. Who helps us

These companies process data for us as processors, under a data processing agreement, and only on our instructions:

We do not sell or rent your data, and we do not share it with advertisers. We only give data to others when the law requires it, for example on a valid order from a court or authority.

7. Data outside the EU

Your account and city are stored in the EU. Some of our providers are US companies, and website requests may be served from outside the EU. Where personal data is transferred outside the European Economic Area, this is protected by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

8. Cookies and local storage

Storage the game needs

Skyline Topia does not use cookies for tracking. The game stores some things in your browser (local storage and IndexedDB) because it needs them to work, so no consent is required for them:

• your sign-in session, so you stay signed in;
• a copy of your city, so the game starts quickly and keeps working when the connection drops;
• your settings: language, graphics quality, sound, day and night, the tutorial, recent and favourite buildings;
• your in-game news and simple daily totals (such as minutes played and buildings placed) that stay on your device.

Signing out removes your city from that device. You can also clear this storage in your browser settings at any time.

Cookies for statistics and advertising (only with your consent)

The cookie banner asks whether we may use cookies to see what players enjoy, to measure our ads and to show our ads to visitors. Only if you click Accept do we load these tools. Today that is Google Analytics 4 (Google Ireland Ltd.): it shows us which pages are visited, roughly where visitors come from (country), what device and browser they use, and a few game moments such as signing up, signing in, reaching a level and starting a purchase. It sets the cookies _ga and _ga_* (kept up to 2 years). We also load the Meta Pixel (Meta Platforms Ireland Ltd.): it tells Meta that a visitor opened a page, signed up or reached level 5, so we can see which of our ads on Facebook and Instagram bring players and show our ads to people who visited the website. It sets the cookies _fbp and _fbc (kept up to 90 days). What Meta does with this is covered by Meta's privacy policy; Meta and we are jointly responsible for collecting it. We never send your name, e-mail address or account id to Google or Meta. Legal basis: your consent (art. 6(1)(a) GDPR).

If you arrive through a link from one of our campaigns, the website keeps that link's campaign tags (such as utm_source=meta) on your device for 30 days. When you then create an account, we store those tags with it once, so we can count how many new players each campaign brings and how far they get in the game. This is not a cookie and it contains nothing about you; legal basis: our legitimate interest in knowing which campaigns work (art. 6(1)(f) GDPR).

If you click Decline, none of these tools is loaded. Your choice is kept on your device for 12 months. You can change it at any time with Cookie settings at the bottom of the page or in the game's Settings; withdrawing your consent removes these cookies.

The game's fonts and images are served by us, not loaded from third parties.

The Android app

The Skyline Topia app from Google Play shows the same game as this website, with the same account, and the same cookie question. In the app you sign in with your e-mail address. Purchases in the app go through Google Play (see section 6). Only if you click Accept does the app also start Meta's app SDK (Meta Platforms Ireland Ltd.), which tells Meta that the app was installed and opened and when you reach level 5, with your device's advertising ID, so we can measure our ads. Without your consent the app sends nothing to Meta. Legal basis: your consent (art. 6(1)(a) GDPR); you can change it the same way as on the website.

The iPhone and iPad app

The Skyline Topia app from the App Store shows the same game as this website, with the same account. It does not track you: it asks no cookie question, loads no analytics or advertising tools (it blocks them) and does not use your device's advertising ID. You sign in with your e-mail address, or on iOS 17.4 and later also with Apple, Google or Facebook (section 3); Google and Facebook then open in Apple's own secure sign-in window.

9. How long we keep data

10. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• correct data that is wrong;
• delete your data (see Deleting your account);
• restrict how we use your data;
• object to uses based on our legitimate interest;
• data portability: get your data in a common, machine-readable format.

E-mail us at info@skylinetopia.com from the address of your account. We may ask you to confirm it is you, and we answer within one month. You also have the right to complain to a data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.

11. Deleting your account

Open Settings in the game, tap Profile and choose Delete account…. Your account, city, mayor name, game scores, chat messages and notifications are deleted straight away and cannot be restored. Prefer e-mail? Write to info@skylinetopia.com from the address of your account and we delete it within one month. This also deletes everything we received from Google, Facebook or Apple. Short-lived server logs and backups at our providers disappear on their normal schedule.

12. Children

Skyline Topia is meant for players aged 16 and over. If you are younger, you may only create an account with permission from a parent or guardian. If we learn that a child under 16 created an account without that permission, we delete it. Parents can contact us at the address above.

13. Security

All connections use HTTPS. Passwords are stored hashed. Each player can only read and change their own account and city; database rules enforce this on the server. Only one administrator account has access to the admin tools, and its access is checked on the server. No method is perfectly secure, but we take reasonable measures and will inform you and the authorities as the law requires if a data breach affects you.

14. Changes to this policy

We may update this policy, for example when we add purchases or new features. The date at the top shows the latest version. If a change is important, we tell you in the game before it applies.

15. Contact

Questions about privacy or this policy: info@skylinetopia.com, or by post to Millstone, Acacialaan 18, 2282 AX Rijswijk, the Netherlands.

Back to Skyline Topia