Your pilot record
A secure first-party cookie links this browser to your progress, equipment, achievements, and verified flight records. It is necessary for saving. You can protect this pilot with a callsign and private recovery code, then restore the same record, engineering balance and purchases on another device. The server stores a cryptographic hash of the recovery code, not the code itself. Clearing the cookie creates a new browser session; use your saved recovery code to regain access. Keep that code private. Recovery switches between pilots without merging their records.
A naval callsign is assigned automatically. You can optionally change it after your first verified boss victory, or from your Pilot panel. Callsigns are labels, not passwords.
The public Top 100 high scores page shows ranked pilots by callsign, along with verified scores, achievement counts, recorded flight hours, primary-gun accuracy, combat records, and saved-flight day streaks. Ranking uses each pilot’s best eligible verified flight in the selected mode and time window; Daily rankings use the shared current daily route. Career statistics include verified saved flights across modes and earlier rules. Public pilot dossiers also show the equipped aircraft, chosen squadron patch and color, earned career insignia, individual achievement awards and progress, an 84-day calendar of saved-flight activity, and a 90-day personal-best score history. Calendar entries show UTC dates and aggregate flight counts and time; they do not reveal exact flight timestamps. Your next-rival panel uses your existing pilot cookie and includes your position even when it falls outside the Top 100. Cosmetic choices are stored with your pilot and follow account recovery. Your private recovery code, account identifiers, IP addresses, recorded controls, and detailed visit diagnostics are never included in the public board. Choose a callsign you are comfortable displaying publicly.
Public pilot records can also show a country or territory flag and a broad device icon: Mobile (including tablets) or PC. By default, the flag uses an approximate country already recorded in optional first-party game analytics, including existing records. It describes a connection location, not nationality, and may be inaccurate when using a VPN or traveling. Some existing pilots without a known country have an assigned starter flag for display. These flags are labeled as assigned, are not verified locations, and automatically give way to a detected country or the player’s own choice. Open your pilot record on the high-score page and choose Personalize your pilot insignia to select a country yourself, return to Automatic, or hide your flag. Your country preference and latest detected country are saved with your pilot; hidden flags do not reveal that detected country publicly. The device icon reflects the latest eligible recorded visit, not whether you are online. When no device is recorded or the underlying visit has expired, a mobile icon is used as a labeled display default; it does not assert the player uses a mobile device. Neither icon reveals an IP address, city, browser, operating system or exact visit time. Turning analytics off prevents new measurements; you can separately hide or change your country flag.
Audio and control preferences are saved on this browser.
A completed flight awaiting server confirmation is also retained in this browser so it can be retried after a reload or connection loss. This includes its recorded controls and a pilot label, with no recovery code. Only the original pilot can submit it. The local copy is removed after the server confirms the save; clearing this site’s browser storage removes any unconfirmed copy.
Traffic and gameplay measurement
We host Umami analytics on our own server to understand visits, page views, referring sites, approximate countries, browsers, devices, and a small set of button clicks. The analytics integration strips page query strings and fragments, referrer paths, and arbitrary event data. It does not send your pilot record ID, save raw IP addresses in the analytics database, record your screen, or record your gameplay inputs.
Optional first-party gameplay diagnostics link your callsign to visits, estimated active play time, broad device details, approximate country, and events such as crashes and boss encounters. Brief status updates also report whether the game is playing, paused, in the hangar, or hidden, together with the current mode, level and displayed score. They support a private activity view; active status expires quickly when updates stop. Estimated play time is summarized by hour. These observed details are kept for 90 days and are distinct from your replay-verified saved results. A roughly 10% sample of visits also contributes a small frame-timing histogram during visible gameplay. Visits may report loading times and counts of script, resource or save errors; messages, stack traces, touch paths and screen recordings are not collected. With optional diagnostics enabled, the existing server verification pass also derives death locations and terrain exposure summaries, kept for 90 days. Save and verification operation timings and outcomes are kept for up to 30 days. These diagnostics do not affect scoring. Automated-traffic labels are estimates, not proof of who is playing.
For diagnostics and abuse review, the operational database retains network IP addresses for 30 days after they are last seen. The private admin dashboard masks them by default; revealing an address requires an authenticated, audited action. An IP address does not identify a unique person. Restricted recovery backups may retain older records until those backups are replaced.
Do Not Track and Global Privacy Control are respected. You can also turn measurement off for this browser below. This preference does not affect your saved progress.
Hosting and sponsored links
Cloudflare delivers and protects this site and processes network information as part of that service. Any enabled sponsorship is clearly labeled “Sponsored by.” It contains a plain link, with no embedded ad network or third-party tracking script. Following that link opens the sponsor’s website, which has its own privacy practices.