flap.run is a game played in a browser and in its Android app. This policy covers both.

what we keep

A random device credential, stored only as a SHA-256 digest. The callsign you choose, the bird you fly and the parts you own. Every run you finish: the course, the gates, the score lines and the time. Your miles balance and its ledger; films you watch are lines in that same ledger. Your daily and lifetime records. The parties you led.

If you sign in with Google: your Google account identifier and a digest of your address, and a session for twelve hours that holds the address itself.

Server logs record network addresses so abuse can be rate limited.

what stays on your device

The credential, your settings, your local bests and your bird, in the app's or the browser's own storage.

who else sees it

Other players see your callsign, your bird and your records on boards and in parties. Google handles sign-in when you choose it. Our hosting provider stores the data.

In the Android app, rewarded films are sold by Google AdMob. You choose to watch each one; nothing plays on its own. Google receives your device's advertising id for this unless you refuse personalisation on the consent card, and the films setting reopens that choice. The browser version shows no ads. There is no analytics service, and nothing is sold by us.

how it is protected

Every request travels over TLS. Credentials and sessions are stored only as digests.

how long it is kept

A guest with no callsign, no runs and no miles is deleted after 30 days without a visit. Sessions end after twelve hours. Everything else is kept until you delete it.

deleting it

Open settings and choose delete my data. It removes your account and everything above at once, in the app or on flap.run. A signed-in account can be deleted from any browser after signing in.