Flag Frenzy - Privacy Policy

FLAG FRENZY — PRIVACY POLICY

Last updated: March 15, 2026

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

OVERVIEW

Flag Frenzy ("the App") is an educational flag and geography quiz game designed for children and families. Your privacy — and especially the privacy of children — is extremely important to us.

🔒 The short version: We collect minimal data needed to run the app. We do not sell, share, or monetise any personal information. 

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

CHILDREN'S PRIVACY (COPPA COMPLIANCE)

Flag Frenzy is designed for use by children. We comply with the Children's Online Privacy Protection Act (COPPA) and similar international regulations.

• We do NOT knowingly collect personal information from children under 13 without parental consent

• We do NOT use behavioural advertising or tracking for children

• We do NOT share children's data with third parties for marketing purposes

• Account creation requires an email address, which should be a parent or guardian's email

• Game data (scores, streaks, achievements) is stored locally on the device only and is not transmitted to any server

If you believe we have inadvertently collected information from a child without proper consent, please contact us immediately and we will delete it.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

DATA WE COLLECT

Email address → Purpose: Account authentication → Stored: Firebase Auth (Google servers)

Display name → Purpose: Personalisation within the app → Stored: Firebase Auth + device

Authentication tokens → Purpose: Keeping you signed in → Stored: Firebase Auth (Google servers)

Game progress (XP, scores, streaks, achievements) → Purpose: Gameplay → Stored: Device only — not sent to any server

In-app purchase status → Purpose: Ad-free entitlement → Stored: Apple's servers (via StoreKit)

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

AUTHENTICATION

We offer three ways to sign in:

• Email & Password — Your email and a hashed password are stored securely on Firebase Authentication servers. We never see or store your plain-text password.

• Sign in with Apple — Apple provides us with a unique anonymous identifier. If you choose "Hide My Email," we never see your real email address.

• Sign in with Google — Google provides us with your name and email address via OAuth. This data is stored in Firebase Authentication.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

ADVERTISING

Flag Frenzy displays ads through Google AdMob. Ads are:

• NOT shown during a user's first 5 completed game rounds

• Configured for child-directed treatment (no personalised or behavioural ads)

• Shown only on the country information screen (not during gameplay)

• Removable permanently via a one-time in-app purchase ($2.95 USD)

We do NOT use the Identifier for Advertisers (IDFA) or request tracking permission.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

ANALYTICS

We use TelemetryDeck, a privacy-first analytics service, to understand how the app is used (e.g. which game modes are most popular). TelemetryDeck:

• Does NOT collect personal information

• Does NOT use cookies or device fingerprinting

• Hashes all identifiers — we cannot identify individual users

• Is fully GDPR and COPPA compliant

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

IN-APP PURCHASES

Flag Frenzy offers a single non-consumable in-app purchase to remove ads permanently. All payment processing is handled by Apple through the App Store. We do not collect, process, or store any payment information.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

THIRD-PARTY SERVICES

• Firebase Authentication (Google LLC) — for user sign-in

  Privacy Policy: https://firebase.google.com/support/privacy

• Google AdMob (Google LLC) — for displaying ads

  Privacy Policy: https://policies.google.com/privacy

• TelemetryDeck (TelemetryDeck GmbH) — for anonymous analytics

  Privacy Policy: https://telemetrydeck.com/privacy

• Apple StoreKit (Apple Inc.) — for in-app purchases

  Privacy Policy: https://www.apple.com/legal/privacy/

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

DATA SECURITY

• All authentication is handled by Firebase with industry-standard encryption

• Passwords are never stored in plain text

• Game data is stored locally on-device using Apple's SwiftData framework

• All network communication uses HTTPS/TLS encryption

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

DATA DELETION

You can request deletion of your account and all associated data at any time by contacting us. Upon request, we will:

• Delete your Firebase Authentication account

• Remove any associated analytics data

• Local game data can be deleted by uninstalling the app

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

INTERNATIONAL USERS

Flag Frenzy is operated from Australia. If you are accessing the app from the European Union, United Kingdom, or other regions with data protection laws, please note that your data may be transferred to and processed in countries where our service providers operate (including the United States). We ensure appropriate safeguards are in place.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━

CONTACT US

If you have questions about this Privacy Policy or wish to exercise your data rights:

Email: flagfrenzysupport@gmail.com

© 2026 Flag Frenzy. All rights reserved.