Privacy Policy

Flickcade is run by the Flickcade team (“Flickcade”, “we”, “us”). We decide how the personal data described in this policy is used, and we are responsible for it.

Write to support@flickcade.com with any question about this policy or your data, or to use your rights (see Your choices and rights).

This policy applies to the Flickcade apps for Android and iPhone, to flickcade.com, to the developer portal at developers.flickcade.com, and to the services behind them.

It does not cover the app stores you download the apps from, or Google when you sign in with it: they handle your data under their own policies. Games on Flickcade are made by independent developers; Games and other content explains what a game can do.

Your account

To create an account you give us a username, an email address and a password, and if you like a display name. We store your password only as a one-way hash, never the password itself.

If you sign in with Google (in the Android app), Google tells us your Google account ID, your email address, whether Google has verified it, your name and, for a work or school account, its domain. If you’re new, your username is “player” followed by random letters and digits — nothing from your email address — and your display name is your Google name, or “Player” if Google has none. Both are public until you change them; your Google name is checked first like any name (Automatic checks and safety). We keep the Google account ID, to recognise you next time, and the email address Google reported when you first signed in with it.

When you sign up, we record which version of the Terms of Service you accepted, and when.

What you post and do

Your profile picture and bio, your comments and replies, the hearts you give comments, the games you like and save, your collections, and the players and studios you follow. When you share a game, we only count the share; we don’t record who shared it.

Reports you send us about games, comments, players or studios, and the players and studios you block.

If you publish games: your studio’s name, handle, bio and picture, and everything you submit with a game — its files, title, description, genres, cover, trailer and the countries it is available in.

How you play — only while you’re signed in

While you’re signed in, the app records each game you play: which game, when, how long it was on screen and for how much of that time it was ready to play, how many times you touched the screen (not where), how the session ended — a swipe, for example, or Not for me — whether you opened it from the feed, Discover or a studio page, and its position in the feed. When you’re not signed in, none of this is recorded.

With these records the app sends an install ID — a random code it creates when you first open it, and replaces with a new one when you delete your account — and your device model, system version and app version. It also sends a guess at your country, from your phone’s region setting or its mobile network; we ignore it and use the country worked out from your IP address instead.

Technical data

Like any online service, our servers receive your IP address with every request. We use it to protect accounts and limit abuse, and our hosting provider’s network works out your country from it. Your country decides which games you can see, because developers choose the countries their games appear in, and it is stored with your play records for statistics.

To stop password guessing, we keep the email address or username typed in a failed sign-in, and the network it came from, for about a day; and the network you sign in from — your IP address, or the network part of an IPv6 address — for 30 days after your last sign-in from it.

The app asks our servers which promotional panel to show; that request carries the install ID and your phone’s region setting, and it is not stored. What you type in search is sent to our servers to find results and is not stored there; the app keeps your recent searches on your phone.

When you contact us

If you email us, we receive your email address and what you write.

• To run Flickcade: your account and sign-in, showing your profile and posts, delivering games, and remembering your likes, saves and follows.
• To keep it safe: checking content before it is published, handling reports, moderating, and stopping fake accounts, password guessing and fake play data.
• To understand how games are played: developers see statistics about their own games — views, play time, numbers of players, how many come back, and from which countries — always as totals, never with your name or ID. We use the same statistics to run and improve Flickcade and to order games in the catalog.
• To suggest games: the Discover shelf “Because you played” uses the games you played in the last 30 days.
• To write to you: only the emails your account or your games need — confirming your email address, resetting your password, telling you a sign-in method was added, telling you about a moderator’s decision on your account or content and, for developers, review results and a reminder before a rejected game is deleted. We don’t send marketing email.
• To meet legal obligations: for example answering lawful requests from authorities, and making the reports the law requires of us.

Legal bases

If you’re in the European Economic Area or the United Kingdom, we rely on these legal bases:

• Contract: to provide the service you signed up for — your account, your posts, your games and the emails they need.
• Legitimate interests: to keep Flickcade safe, to produce statistics for developers and for us, to suggest games, and to apply developers’ choice of countries. You can object; see Your choices and rights.
• Consent: for a game’s use of your camera, microphone or location, which you give or refuse in the app and can take back in Settings.
• Legal obligation: where the law requires us to keep, report or disclose data.

Anyone

Your username, display name, profile picture and bio; your comments and replies; the players you follow and who follows you; and studio pages with their games. A studio’s owner is shown only if they choose to show the studio on their profile.

Only you

Your email address, the games you like and save, your collections, and the players and studios you block. Others see only totals, such as how many likes a game has. Someone you block isn’t told, but may notice that they can no longer follow you.

Developers

Statistics about their own games, as totals. Developers never see who played their game, who reported it, or your email address.

Our moderators

What they need to review content and reports — for example a reported comment and its author, or an account’s email address and the studios it owns. They don’t see who reported something.

Our service providers

Companies that run parts of Flickcade for us, under our instructions:

Authorities and safety

We disclose data when the law requires it — for example to report child sexual abuse material — or when it is needed to protect someone from serious harm.

If Flickcade changes hands

If the running of Flickcade passes to another organisation — for example a company set up to operate it — your data passes with it, and this policy keeps applying until a new version is published and you are told.

We don’t sell personal data, and we don’t share it with advertisers.

Every game on Flickcade is made by an independent developer, and a moderator reviews it before players can see it. Every game is served with rules that limit what it can load to its own files and to the services its developer declared and a moderator reviewed. Those rules can’t cover everything: a game can still open a direct connection to another device or server (WebRTC) that nobody reviewed.

Like any website you visit, every server a game connects to — the services its developer declared included — receives your IP address.

A game can save data on your phone, such as your progress. It stays there: Flickcade doesn’t upload it, and it is lost if you uninstall the app or clear its data.

A game may ask to use your camera, microphone or location. It gets access only if you allow it — the app asks you for that game, and on iPhone the system asks for location — and only while the game is on screen. Flickcade doesn’t record what the camera, microphone or location provide, but the game receives it and may send it on. You can take back camera and microphone access under Settings → Reset game permissions in the app (on Android, location too), and any of them in your phone’s settings.

The developer of a game is responsible for any personal data the game handles itself. If a game asks for information you’d rather not give, don’t give it, and report the game.

Promotional panels in the app are chosen by us. Some show a page from another website; when one does, your phone connects to that site.

Before a username, display name, bio, comment or profile picture, or a studio’s name, handle, bio or picture, is published, it is checked by OpenAI’s moderation service. Each check receives only the text or the picture being checked — not your email address or account ID.

If a check refuses something, it isn’t published and we don’t keep it; our logs note only that your account had something refused, and the kind of problem. If the check can’t be done right then, nothing is published and you can try again shortly. The one exception is signing up with Google: if your Google name is refused or can’t be checked, your display name is “Player” instead, which you can change. Your new username needs no check: it is “player” with random letters and digits.

OpenAI states that it does not use data sent to its API to train its models.

If a check refuses something and you think it got it wrong, write to us with what you tried to post, and a person will look at it.

Covers, profile and studio pictures and trailers are re-encoded before they are stored, and only the re-encoded file is kept. This removes data hidden in the file, such as the place where a photo was taken.

People review reports and decide what to do; no automatic check removes what is already published or suspends anyone. When a moderator removes a comment, it is deleted, and our moderation records keep up to its first 120 characters. A removed picture is deleted. A suspended account or studio, and a suspended or blocked game, is hidden from everyone but kept until the suspension or block is lifted, or it is deleted.

We keep data only as long as we need it. “While your account exists” ends when you delete your account.

You can delete your account in the app — Profile → Settings → Delete account — or ask us by email, and we delete it for you. Your account, profile, posts, likes, saves, follows, blocks and reports — yours, and those others made about you — are deleted at once, with any studios you own and their games. Delete your account has the steps and lists what remains, and for how long.

Play records made before you deleted your account keep your account’s random ID until they expire, but — outside the records of a suspension described above — nothing links that ID to your username or email address any more; your phone gets a new install ID. Moderation records are kept as described above; copies in logs, email records and backups expire on the schedule above.

In the app you can change your username, display name, bio and picture (once your email address is confirmed); delete your comments; remove likes, saves and follows; block and unblock players and studios; reset what games may use; sign out; and delete your account.

Depending on where you live, you also have the right to:

• get a copy of the personal data we hold about you, and receive the data you gave us in a format you can reuse;
• have inaccurate data corrected — including your email address, which you can’t yet change in the app;
• have your data deleted;
• object to our use of your data based on legitimate interests, or ask us to restrict it;
• take back consent you gave, without affecting what was done before;
• complain to a data protection authority, for example the one where you live.

To use these rights, write to support@flickcade.com from the email address of your account, so that we know the request is yours. We answer within one month.

We don’t make decisions about you that have legal or similarly significant effects based solely on automated processing.

Flickcade is not for children under 13. If the law where you live sets a higher age for agreeing to the use of your personal data — up to 16 in some countries of the European Union — you need the consent of a parent or guardian below that age.

We don’t ask for your age when you sign up; by creating an account you confirm that you meet these requirements. We don’t knowingly collect data from children under 13. If you believe a child under 13 has an account, tell us at support@flickcade.com and we will delete it.

Connections to Flickcade are encrypted. On our servers, passwords and sign-in tokens are stored only as one-way hashes; the apps keep your session in storage that only the app can read.

Games run in their own web pages, at addresses apart from your account, so a game can’t read your sign-in.

No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

Our database is in Frankfurt, Germany. Some providers process data in other countries: Resend stores the emails it sends for us in the United States, Cloudflare and Google run worldwide networks, and OpenAI checks content in data centres that may be outside your country.

When data leaves the European Economic Area or the United Kingdom, we rely on safeguards the law recognises, such as the European Commission’s Standard Contractual Clauses.

flickcade.com uses no cookies, no analytics and no third-party scripts.

The developer portal uses one cookie, readable only by our servers, to keep you signed in. Your browser deletes it when you close it, unless you choose Keep me signed in, which keeps it for up to 60 days. The portal also remembers your selected studio, your theme and your preview size in your browser. A game you preview there can store its own data in your browser, at the preview’s separate address.

The apps keep your session, the install ID, downloaded games, pictures and videos, game saves, your recent searches and your settings on your phone; uninstalling the app removes them. Your phone’s own backups — to your Google account on Android, to iCloud or your computer on iPhone — can include the install ID, your settings and game-permission choices, your recent searches, the list of games the feed showed you and cached profile information such as your studios and collections. They never include play records waiting to be sent, downloaded games or game saves, and on Android never your session.

The apps use no advertising identifiers and no advertising or analytics SDKs.

When we change this policy, we update the date at the top. If a change affects how we use your data, we tell you in the app or by email before it takes effect.

Questions, requests or complaints about your data: support@flickcade.com.