Privacy policy

You sign in with Apple. Apple gives us a stable account identifier and an email address, the address you use for your Apple ID, or the private relay address Apple generates if you choose to hide it. We store that, together with the username you pick, so that other players and your co-authors can see who you are.

Why: to give you an account that your games follow between devices, and to let hosts and collaborators identify you. You will also have a UUID (Universally Unique Identifier) that you can use to be identified across different platforms.

The projects you create in the app or the web editor: maps, decks, challenge cards, timelines, artwork you add, and the settings around them. If you share a project with another account, or publish one to the Community page, that content becomes visible to the people you share it with or, in the case of Community, to everyone.

Why: to store your work, to sync it, and to run games from it.

While a game is running: who has joined, which group they are in, scores, coins, territory held, and a history of actions taken during that game. We also collect location in the form of a replay during live games. Your data in the replay cannot be accessed during a game

Why: Its how we make the game work for everyone.

When you are in a live game and have granted location permission, the app sends your position to the game server, which passes it to the other people in that game so their maps can show where you are. Some game types also use it to decide whether you have reached a place, claimed a territory, or returned to a paused spot.

• Location is collected only while you are in a live game, and stops when the game ends or you leave it. Nothing is collected between games.
• The positions recorded during a game are kept afterwards as that game's replay — see below.
• It is not used to build a profile of you, it is not combined with data from anywhere else, and it is never used for advertising.
• You can decline the permission and still play. Your group will not see your dot, you will not appear in the replay, and location-based game types will be limited. This will affect the functionality and enjoyment of the game.

You can change or revoke the permission at any time in Settings, then Flaguu, then Location on your iPhone.

Flaguu saves a replay of each game: the recorded track of where each player moved while the game was running, alongside the scores and the actions they took. Every action is stored and allows you to reflect on your strategical choices during the day, or replay an exciting moment.

A replay means that, unlike the live map, your movements during a game are stored rather than passed on and forgotten. Specifically:

• The replay covers the game only. It starts when the game starts and stops when it ends.
• It is visible to the host of that game and to the people who played in it. It is not public, and it is not shown to anyone else.
• It is stored independently of any games, and will not be deleted when the game is deleted.
• Test games leave no replay behind.
• If you decline location permission, there is no track of you to record, but your actions and those of your teammates will be recorded.

When you choose to join a game, you consent to the replay being recorded and stored/attached to others accounts. Your location data in replays is not deleted when you delete your account.

Game tokens are bought through Apple's in-app purchase system. Apple handles the payment; we never see your card details, billing address or Apple ID password. We receive a confirmation from Apple that a purchase was made, and we record the token balance on your account. Redeeming a token on your account is only tied to your account UUID.

If you write to us, we keep your message and our reply so we can follow the problem through. Bug reports usually include your iPhone model, what you were doing and a game code. We may also ask for additional information to help us understand and resolve the issue, and reserve the right to hold all that information for any period of time required to resolve the issue, and for diagnostic purposes.

Our servers keep short-lvied request logs: IP address, time, the address requested and the result, as any web server does, along with basic records of how the app is being used, such as which games were hosted and when. They are used to keep the service running and to deal with abuse, rate limiting and security incidents, and they are discarded on a rolling basis. Crash and performance diagnostics reach us through Apple, without your name or account attached to them. Signing in to the website sets a session cookie so the site knows it is still you; that cookie is strictly necessary for the console to work, and there are no advertising or analytics cookies. You cannot opt out of this, and deleting your account does not delete this data immediately.

If you use our app, or a photo of yourself, we may use it in our promotional materials. Photos come from user submissions only, and we will always check with you beforehand before using any of your content. We reserve the right of assumed consent if a response was not recieved to the email provided on file with 14 days. You can request that we remove your content from our promotional materials at any time by emailing us.

Flaguu is not directed at children under 13,. Younger players sometimes take part in games run by a parent, teacher or group leader; that adult is the host and controls the game. If you believe a child under 13 please email us with details and we will open an investigation and comply with local laws regarding the matter.

Our servers and database are hosted in the United States. If you use Flaguu from elsewhere, your data is transferred there. Where UK or EU law requires it, we rely on the standard contractual clauses with our hosting provider for that transfer.

Traffic to the app and the website is encrypted in transit. Access to the database is restricted to the service itself and to the people who run it. Sign in is handled by Apple. If transbay.dev, or Railway has a data breach, we will notify you promptly as required by law

Changes to this policy will be posted on this page. Significant changes will also be announced in the app before they take effect.

Flaguu is made by Transbay. For anything on this page, including a request about your data, write to flaguu@transbay.dev.