FlagFlip Privacy Policy
Last updated: 11 October 2026
FlagFlip ("the game", "we") is a flag memory card game available on the web, Google Play and the Apple App Store. This policy explains what information the game uses and why. We keep data collection to the minimum needed to run the game.
1. Information you provide
- Nickname. The name you type is stored only on your device. When you create or join an online room, it is shared with the other players in that room.
- Room password. If you set one, only a one-way hash of it is sent, never the password itself.
We do not ask for your real name, phone number, location or contacts. Signing in to an account is optional (see section 2c).
2. Online rooms
Online play uses Google Firebase Realtime Database. While you are in a room, your nickname, a random session ID and the game state (cards, scores, turns) are stored there so other players can see them. This data is deleted automatically when you leave the room or disconnect. Firebase may process technical data such as your IP address to deliver the service. See Firebase privacy and security.
2a. Anonymous sign-in
To protect online rooms, the game may sign you in anonymously with Firebase Authentication. This creates a random ID that is not linked to your name, email or phone, and is used only so that each player can change their own room data and nobody else's.
2b. Analytics
We use Google Analytics for Firebase to understand how the game is played and to fix problems: for example, which modes and packs are popular, how long games take, whether ads loaded, and technical error messages. These events contain game codes and numbers only, never your nickname or room chat. Google may collect device information, an app instance ID and your approximate location (country or city level, derived from your IP address). See Firebase privacy and security.
2c. Accounts (Google / Apple sign-in)
You can play without an account. If you choose "Sign in with Google" or "Sign in with Apple", Firebase Authentication (Google) handles the sign-in and processes the email address and basic account details that Google or Apple share with it, as described in the Firebase privacy and security page. We do not store your email address in our database and we do not use it to contact you. Our database stores only your account's random user ID, your public profile (section 2e) and your cloud save (section 2d). When you sign in, the anonymous ID from section 2a is linked to your account so your progress, friend code and rating stay the same. Signing out returns the game to a new anonymous ID; the progress on your device stays on your device.
2d. Cloud save
When you are signed in, the game keeps a copy of your progress in Google Firebase Realtime Database so you can continue on another device: coins, card backs and packs you unlocked with coins, World Tour stars, achievements, daily streak, number of games and wins, and best results. Only you can read or change your cloud save. If the device and the cloud both have progress, they are combined (for example, the higher coin balance and all unlocked items are kept). Purchases made with real money (such as "Remove ads" or "All packs") are never stored in the cloud save; they are restored only through Google Play or the App Store (section 4).
2e. Public profile and rating
Every online player has a small public profile so friends and opponents can find and recognise each other: your nickname, the flag you picked as your avatar, a country code taken from your device's language and region setting (for example "AZ"), a rating, the number of rated games and wins, and the time you were last online. This profile is visible to other players. It contains no email, real name or precise location. You can change your nickname and flag at any time on the 👤 Profile screen.
2f. Friend codes
Each profile gets a random 6-character friend code (for example "K7Q2ZA"). Anyone who knows your code can look up your public profile and add you as a friend. Share it only with people you want to play with. The code is released when you delete your account.
3. Advertising
The mobile apps show ads through Google AdMob. AdMob may collect and use your device's advertising identifier, IP address and general device information to show ads, limit how often you see them and measure their performance. Where required by law (for example in the EEA and the UK), you are asked for consent before personalised ads are shown, and you can change your choice later. You can also reset or limit your advertising ID in your device settings. See how Google uses information from apps that use its services.
The website (flagflip.web.app) shows ads through Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this and other sites. You can opt out of personalised advertising in Google Ads Settings, or opt out of some third-party vendors' cookies at www.aboutads.info. Where required by law, you are asked for consent before personalised ads are shown.
4. In-app purchases
Purchases (such as "Remove ads") are processed by Google Play or the Apple App Store. We never see your payment details. We use RevenueCat to check which purchases you own, using an anonymous app user ID. See the RevenueCat privacy policy.
5. Data stored on your device
The game stores your nickname, language, best results, daily challenge results, daily streak, achievements and game settings in your device's local storage. This data never leaves your device unless described above, and it is removed when you uninstall the app or clear site data.
5a. Daily reminders
In the mobile apps you can choose to get one daily reminder when a new daily challenge is available. It is off unless you say yes, and your phone asks for notification permission first. Reminders are local notifications scheduled on your device: no push service, notification token or personal data is sent to us or to anyone else. You can turn them off at any time in the game (🏆 screen) or in your phone's settings.
5b. Invite and friend-request notifications
In the mobile apps you can choose to be notified when a friend invites you to a game or someone sends you a friend request. It is off unless you say yes, and your phone asks for notification permission first. If you allow it, the app stores a push token from Firebase Cloud Messaging (Google) together with your platform (Android or iOS) and game language under your user ID, so we can send these notifications. The notification shows only the other player's nickname. We do not use the token for advertising or any other messages. The token is removed when you sign out or delete your account, and you can turn notifications off at any time in your phone's settings.
5b. Feedback
If you send us a message from the in-game "Feedback" form, we store the message, its type (idea, problem or other), the game language, platform and version, and the time it was sent. An email address is stored only if you choose to enter one, and is used only to reply to you. Messages are kept in Google Firebase, are visible only to us, and you can ask us to delete them at any time.
5c. Deleting your account
You can delete your account at any time in the game: 👤 Profile → "Delete account". This permanently deletes your public profile, rating, friend code, notification tokens and cloud save from our database and deletes your Firebase Authentication account (you may be asked to sign in again to confirm). Progress stored only on your device stays there until you uninstall the app or clear site data. If you cannot open the game, email us from the address below and we will delete your account data.
6. Children
FlagFlip is intended for players aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will delete it.
7. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data and to object to its processing. Room data is deleted when you leave, your account and its data can be deleted in the game (section 5c), and device data is removed when you uninstall the app. For any request, contact us at the address below.
8. Changes
We may update this policy. The "Last updated" date above shows when it last changed.
9. Contact
FaiqDev: techproduct977@gmail.com