This Privacy Policy describes how FlagSnap collects, uses, and protects your information.
1. INFORMATION WE COLLECT
- Account information (email, name, profile data)
- Usage data and analytics
- Team and play data you create
2. HOW WE USE INFORMATION
- To provide and improve our services
- To communicate with you
- To ensure platform security
3. INFORMATION SHARING
We do not sell your personal information. We may share data:
- With your consent
- With service providers who help us operate FlagSnap
- For legal compliance
- To protect our rights
- During a business transfer such as a merger, acquisition, or asset sale
4. DATA SECURITY
We implement appropriate security measures to protect your information. Data is encrypted in transit using industry-standard TLS, and stored data is encrypted at rest through our cloud infrastructure providers. Account credentials are managed through Google Firebase Authentication. While no method of transmission or storage is fully secure, we work to protect your information using established industry practices.
5. DATA RETENTION
We retain your account information for as long as your account is active. After account deletion, personal information is removed within 90 days, except where retention is required by law (for example, for tax, accounting, or legal compliance). Aggregated or anonymized analytics data may be retained for longer periods to inform product improvement.
6. INTERNATIONAL DATA TRANSFERS
FlagSnap is operated from the United States, and your information may be processed and stored in the United States or other countries where our service providers operate. By using FlagSnap, you consent to the transfer of your information to these locations. Where applicable, we rely on Standard Contractual Clauses or other approved legal mechanisms for cross-border data transfers.
7. YOUR RIGHTS
You can:
- Access your data
- Correct inaccurate information
- Request deletion (see account deletion in settings)
- Export your data (contact privacy@flagsnap.com)
8. CHILDREN'S PRIVACY
FlagSnap may be used by children under 13 only with verifiable parental consent through our parent-managed player account flow. We comply with the Children's Online Privacy Protection Act (COPPA). Parents can review, modify, or request deletion of their child's information at any time by contacting privacy@flagsnap.com. We collect only information necessary to provide the FlagSnap service to enrolled child accounts; targeted advertising, behavioral profiling, and advanced analytics are never enabled for child accounts.
9. COOKIES
We use cookies to improve your experience. See our cookie settings in the app.
10. ADVANCED ANALYTICS & THIRD-PARTY SERVICES
With your explicit consent, FlagSnap uses trusted third-party services to collect enhanced usage data for product improvement. This may include session replay (recordings of clicks, scrolls, and page navigation), performance telemetry, interaction heatmaps, and crash reproduction data. All text inputs and sensitive content are automatically masked before collection. Advanced analytics are never enabled for child accounts, require your opt-in consent, and are used solely to improve the FlagSnap experience. Data is processed by our analytics partners in accordance with their privacy policies and our data processing agreements.
Service providers used by FlagSnap include:
- Google Firebase (authentication, push notifications, cloud messaging)
- Amazon Web Services (file and media storage)
- Cloudflare (content delivery, video streaming)
- PostHog (product analytics and session replay, with consent)
- Resend (transactional email)
Each provider operates under its own privacy policy and our data processing agreements.
11. CALIFORNIA CONSUMER PRIVACY ACT (CCPA)
California residents have additional rights:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (we do not sell personal information)
- Right to non-discrimination
To exercise these rights, visit your account settings or contact us at privacy@flagsnap.com.
12. EUROPEAN UNION / UK USER RIGHTS (GDPR)
If you are a resident of the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and equivalent laws:
- Right to access your personal information
- Right to rectification (correct inaccurate information)
- Right to erasure (request deletion)
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time where processing is based on consent
- Right to lodge a complaint with your local data protection authority
The legal bases for processing your information include your consent, performance of our contract to provide the FlagSnap service, and our legitimate interests in operating and improving the platform.
To exercise any of these rights, contact us at privacy@flagsnap.com. We will respond within 30 days.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date below and notify you through the FlagSnap app or by email. Continued use of FlagSnap after changes take effect constitutes acceptance of the updated policy.
14. CONTACT US
For privacy questions, contact us at privacy@flagsnap.com.
Last updated: 5/4/2026