Privacy policy · FlagDecker

Who this policy covers

This policy explains how FlagDecker, the free browser card game available at flagdecker.com, handles personal information when you visit or play. It applies to visitors, guests, and players who use FlagDecker, including optional sign-in, private multiplayer rooms, ranked play, and public leaderboards.

This policy does not apply to third-party websites, services, or platforms that FlagDecker may link to or use, such as Google sign-in, advertising partners, or analytics providers. Those third parties handle information under their own privacy policies and terms. If you choose to use a third-party service, you should review its privacy information.

Information we collect

FlagDecker collects information in the following categories, depending on how you use the service:

Account and sign-in information: If you choose optional Google sign-in, Google provides basic profile information such as your name and email according to the scopes you approve. Guests can play without an account.
Guest display information: A short random guest display ID may be stored in your browser using localStorage so that you keep a name in a session. This is not an account.
Gameplay information: Information needed to operate the game, including display names, participation in private multiplayer rooms, ranked play rating, and entries on the public leaderboard of top players.
Public-facing information: Display names may appear to other players and on the leaderboard. Information you make public or that is displayed through gameplay may be seen by others.
Technical and usage information: Information about how you access and use FlagDecker, such as browser and device type, pages or features used, general interactions with the service, and technical data used to deliver and secure the service.
Advertising and cookie information: Third-party advertising partners may use cookies or similar technologies to collect information about your browser, device, and interactions, as described in this policy.
Communications: If you contact us through the contact page or by email, we receive the information you provide, such as your email address and message content, so we can respond.

How we use information

FlagDecker uses information for the following purposes:

To provide and operate FlagDecker, including guest play, optional sign-in, display names, private multiplayer rooms, ranked play, ratings, and leaderboards.
To maintain, secure, and improve the service, including understanding traffic and usage through analytics, improving features and gameplay, and addressing performance or technical issues.
To display advertising from third-party ad partners and to measure and improve advertising effectiveness, including through cookies or similar technologies where permitted.
To communicate with you, respond to inquiries, and handle privacy or account requests.
To prevent fraud, abuse, and misuse; enforce applicable rules; protect the rights, safety, and security of FlagDecker, players, and others; and comply with legal obligations.
To establish, exercise, or defend legal claims and to respond to lawful requests from public authorities where required.

Legal bases

Where data protection laws such as the GDPR or UK GDPR apply, FlagDecker relies on the following legal bases:

Performance of a contract or steps at your request: to provide FlagDecker, including guest play, optional account features, private rooms, ranked play, ratings, and leaderboards.
Legitimate interests: to operate, secure, and improve FlagDecker; to understand traffic through analytics; to display and measure advertising where consent is not required; to prevent fraud and abuse; and to establish, exercise, or defend legal claims. We balance these interests against your rights and freedoms.
Consent: where required for cookies, advertising, analytics, or optional features. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Legal obligation: to comply with applicable law, lawful requests, and regulatory requirements.

How we share information

FlagDecker shares information only as described in this policy or as required by law:

With other players: display names, leaderboard entries, ratings, and information related to private multiplayer rooms may be visible to other players depending on the feature and your choices.
With service providers: providers that help operate FlagDecker, including analytics providers, advertising partners, and technical or support providers. These providers process information for the purposes described in this policy and are subject to appropriate obligations.
With Google: if you choose optional Google sign-in, Google handles the sign-in process and provides basic profile information according to the scopes you approve. Your use of Google is subject to Google’s terms and privacy policy.
With advertising partners: third-party ad partners may receive information through cookies or similar technologies as described in the Advertising and Cookies sections. These partners may act under their own privacy policies.
For legal and safety reasons: if required by law, regulation, legal process, or lawful request, or if necessary to protect the rights, safety, security, or property of FlagDecker, players, or others, or to investigate abuse or fraud.
In connection with a business transfer: if FlagDecker is involved in a merger, acquisition, reorganization, or transfer of assets, information may be transferred subject to this policy and applicable law.

FlagDecker does not sell personal information.

Cookies and similar technologies

FlagDecker uses cookies and similar technologies, including localStorage, to operate the service and support analytics and advertising. These technologies may store or read information on your browser or device.

Necessary technologies: used to provide core functionality, such as storing a short random guest display ID in localStorage so you keep a name in a session, maintaining preferences, and supporting security and basic operation.
Analytics technologies: used to understand traffic and how players use FlagDecker so we can improve the service.
Advertising technologies: third-party ad partners may use cookies or similar technologies to deliver, measure, limit, and improve advertising and may recognize your browser or device over time and across websites.

You can manage cookies and localStorage through your browser settings, including deleting stored data or blocking certain technologies. Where required, we provide consent or preference controls. Blocking or deleting cookies or localStorage may affect how FlagDecker works. Withdrawing consent does not affect processing that occurred before withdrawal.

Advertising

FlagDecker displays advertising from third-party ad partners. These partners may use cookies or similar technologies to collect information about your browser, device, and interactions with FlagDecker and other websites over time in order to provide, measure, limit, and improve advertising. Advertising partners may act as independent controllers or processors under their own privacy policies.

Where required by law, FlagDecker obtains consent before using non-essential cookies or similar technologies for advertising, and you may withdraw consent or manage preferences through available controls or your browser settings. FlagDecker does not sell personal information. You may also contact us using the details in the Contact section for questions or requests relating to advertising and privacy choices.

Analytics

FlagDecker uses analytics to understand traffic and usage and to improve the service. Analytics providers may collect or receive technical and usage information such as pages or features used, browser and device type, general interactions with FlagDecker, and similar information. Analytics technologies may use cookies or similar technologies as described in this policy.

We use analytics to operate, maintain, and improve FlagDecker, including understanding which features are used and how the service performs. Where possible, we use aggregated or de-identified information. Where consent is required, we obtain it before using non-essential analytics technologies, and you may withdraw consent or manage preferences through available controls or your browser settings.

International transfers

FlagDecker is available internationally. Information may be processed in countries other than your own, which may have different data protection laws. Where required, FlagDecker uses appropriate safeguards for international transfers, such as contractual protections, and takes steps designed to ensure information receives an adequate level of protection.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may contact us using the details in the Contact section for more information about the safeguards used for international transfers.

Data retention

FlagDecker keeps personal information only for as long as needed for the purposes described in this policy, unless a longer retention period is required or permitted by law. We retain account information while your account remains open. We retain leaderboard and rating information while the account is active, and afterward for a reasonable period or as required by law.

A short random guest display ID stored in localStorage remains in your browser until you clear it, it is overwritten, or it is no longer needed for the session-related purpose. Analytics and advertising information is retained according to our needs and the settings or terms of the relevant providers. We may retain information for legal compliance, security, fraud prevention, dispute resolution, and to establish, exercise, or defend legal claims. Public leaderboard or rating information may remain visible for a reasonable period after account deletion or may be removed or anonymized as appropriate. We do not use exact day counts because retention depends on the purpose, the type of information, and legal requirements.

Security

FlagDecker uses reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. These measures are intended to protect the confidentiality, integrity, and availability of information and are reviewed as appropriate.

No method of transmission or storage is completely secure, and FlagDecker cannot guarantee absolute security. If we become aware of a security incident that requires notification, we will notify affected individuals and authorities as required by applicable law.

Your rights

Depending on your location and applicable law, including if you are in the European Economic Area, the United Kingdom, or Switzerland, you may have the right to:

Access the personal information we hold about you and receive information about how it is processed.
Request rectification of inaccurate or incomplete personal information.
Request erasure of personal information in certain circumstances.
Request restriction of processing in certain circumstances.
Request portability of personal information you provided, where applicable.
Object to processing based on legitimate interests or, where applicable, to direct marketing.
Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
Lodge a complaint with a supervisory authority in your country or region.

You can exercise your rights by contacting us through the contact page at https://flagdecker.com/contact/ or by emailing support@flagdecker.com. We may need to verify your identity before responding. We will respond as required by applicable law. You can also manage cookies and similar technologies through your browser settings and any available consent or preference controls.

California privacy rights

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act may give you the right to know what personal information is collected, used, shared, or disclosed, including the categories of information, sources, purposes, and categories of third parties; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information; and the right not to be discriminated against for exercising these rights.

FlagDecker does not sell personal information. We may share personal information with advertising partners in connection with cross-context behavioral advertising, which may be considered “sharing” under California law. You may opt out of such sharing by contacting us through the contact page or by email, or by using any available consent or preference controls. We may verify your request and may allow an authorized agent to submit a request with proof of authorization. We will not discriminate against you for exercising your California privacy rights. Some information may be retained as required or permitted by law.

Children

FlagDecker is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it. Parents or guardians who believe a child under 13 has provided personal information to FlagDecker should contact us using the details in the Contact section.

If local law requires a higher age for consent to online services or data processing, FlagDecker should not be used without any required consent or authorization. We encourage parents and guardians to monitor children’s online activity and to contact us with any questions.

Account deletion

You may delete your FlagDecker account from the account page after you sign in. You may also request deletion by contacting us through the contact page at https://flagdecker.com/contact/ or by emailing support@flagdecker.com. We will delete or de-identify account and profile information, except information we are required or permitted to retain for legal, security, fraud prevention, dispute resolution, or similar purposes.

Leaderboard and rating information may remain while the account is active and for a reasonable period after deletion, or as required by law, after which we may remove or anonymize it as appropriate. Deleting your FlagDecker account does not delete your Google account. Guest data stored in localStorage can be cleared through your browser settings. We may need to verify your identity before completing an account deletion request.

Changes

FlagDecker may update this policy from time to time. When we make changes, we will post the revised policy on this page, and the revised policy will be effective when posted unless otherwise stated. Where appropriate, we may provide additional notice of material changes.

Your continued use of FlagDecker after changes are posted means you accept the revised policy to the extent permitted by applicable law. You should review this policy periodically for updates.

Contact

For questions about this policy, privacy requests, or account deletion requests, please use the contact page at https://flagdecker.com/contact/ or email support@flagdecker.com. Please include enough information for us to understand and respond to your request. We may need to verify your identity before processing certain requests.