Privacy Policy

Flagga ("we", "us") is a free flag-guessing game available at flagga.online. Questions about this policy: flagorfail@gmail.com.

We only collect what we need to run the game and the leaderboards:

• Google account info (email address, account ID) — only if you choose to sign in with Google.
• Username — chosen by you and shown on the global leaderboard.
• Game scores — round scores, correct/incorrect counts, average answer time, timer length, and timestamps.
• Local preferences — theme, local player name, and per-device stats stored in your browser (not sent to us unless you sign in and submit a score).

• To run the game and show your stats back to you.
• To power the global leaderboard.
• To sync your username across devices when you sign in.
• To prevent abuse (rate limits, blocking inappropriate usernames).

• Consent — when you sign in with Google and submit scores to the global leaderboard.
• Legitimate interest — basic anti-abuse measures (rate limiting, username moderation).

• Lovable Cloud — hosts our app and database (powered by Supabase infrastructure).
• Google — provides OAuth sign-in. We never see your Google password.

We do not sell your data and we do not share it with advertisers.

We do not use advertising cookies or third-party analytics. Sign-in and your preferences are kept in your browser's local storage.

On your first visit we show a short notice about this. Choosing "Accept" or "Reject non-essential" only records your choice — there are currently no non-essential cookies or trackers either way. To revoke your choice, clear site data in your browser or use "Reset Local Stats & Leaderboard" in Options.

Your account, username, and scores are kept until you ask us to delete them. Local browser data stays on your device until you clear it or use "Reset Local Stats & Leaderboard" in Options.

Under GDPR (and similar laws), you can request access to, correction of, or deletion of your data. Email flagorfail@gmail.com and we will respond within 30 days.

Flagga is not directed at children under 13. If you believe a child has provided us data, contact us and we will remove it.

We may update this policy. Material changes will be reflected in the "Last updated" date above.