Privacy Policy

1 Introduction

GreenFlag Games ("we," "us," or "our") operates the website greeenflaggames.com and publishes mobile games on Google Play (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Services.

By accessing our website or using our games, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please do not access our Services.

2 Data Controller

For the purposes of the General Data Protection Regulation (GDPR) and applicable data protection laws, the data controller is:

3 Data We Collect

3.1 Information You Provide Directly

• Contact Information: When you contact us via our website (name, email address, country, message content)
• Support Tickets: Subject, message, and category of your support request

3.2 Information Collected Automatically

• Log Data: IP address (anonymized), browser type, pages visited, referring URLs, and timestamps
• Device Information: Device type, operating system, screen resolution
• Analytics Data: Pages viewed, features used, and time spent on site (only with your consent)
• Cookie Data: See Section 14 and our Cookie Policy

3.3 Information from Third Parties

• Google Firebase: Authentication and database services (see Firebase Privacy Policy)
• Google AdMob: Advertising identifier and ad interaction data in our games (only with your consent)
• Google Analytics: Aggregated usage statistics (only with your consent)

4 How We Use Your Data

We use the data we collect for the following purposes:

• To respond to your support requests and inquiries
• To provide, maintain, and improve our Services
• To analyze how our website and games are used (with your consent)
• To serve relevant advertisements through Google AdMob (with your consent)
• To comply with legal obligations
• To protect against fraud, abuse, and security threats
• To enforce our Terms & Conditions

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

5 Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data on the following legal bases under GDPR Article 6:

• Consent (Art. 6(1)(a)): Analytics cookies, personalized advertising. You may withdraw consent at any time.
• Legitimate Interests (Art. 6(1)(f)): Fraud prevention, security, improving our Services, responding to support requests.
• Legal Obligation (Art. 6(1)(c)): Compliance with applicable laws and regulations.
• Contract (Art. 6(1)(b)): Processing necessary to fulfill our Terms & Conditions when you use our Services.

6 Data Sharing & Third Parties

We do not sell your personal data to any third party. We share data only with the following categories of recipients:

• Google LLC (Firebase, AdMob, Analytics): Cloud infrastructure, database, and advertising services. Subject to Google's Privacy Policy.
• Netlify Inc.: Website hosting. Netlify may process log data per their Privacy Policy.
• SendGrid (Twilio): Transactional email delivery. Used to send ticket confirmation emails.
• Legal Authorities: We may disclose data when required by law, court order, or to protect the rights of GreenFlag Games or others.

All third-party processors are bound by data processing agreements and are contractually obligated to handle data in accordance with applicable privacy laws.

7 Data Retention

• Contact form submissions / Support tickets: Retained for 2 years from the date of last activity, then permanently deleted.
• Analytics data: Retained in aggregated form for up to 26 months.
• Server logs: Retained for 90 days for security purposes.
• Cookie data: As specified in our Cookie Policy (session to 13 months depending on category).

Data subject to a legal hold or ongoing legal proceedings will be retained until the hold is released or proceedings are concluded.

8 Your Rights (GDPR)

If you are located in the EEA or UK, you have the following rights under GDPR:

• Right of Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal data, subject to certain conditions.
• Right to Restriction of Processing (Art. 18): Request we restrict processing of your data in certain circumstances.
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests, including profiling.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time without affecting prior processing.
• Right to Lodge a Complaint: You have the right to complain to your local data protection authority (e.g., the ICO in the UK, or your national supervisory authority).

To exercise any of these rights, email legal@greeenflaggames.com with the subject line "Data Rights Request." We will respond within 30 days.

9 California Consumer Privacy Act (CCPA)

If you are a California resident, you have the following rights under the CCPA and CPRA:

• Right to Know: Know what personal information we collect, use, and share.
• Right to Delete: Request deletion of your personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by CCPA.

To submit a CCPA request, email legal@greeenflaggames.com with subject "CCPA Request." We will respond within 15 business days.

10 Children's Privacy (COPPA)

Our games and website are not directed to children under the age of 13. In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or share personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take immediate steps to delete that information.

If you believe we have inadvertently collected personal data about a child under 13, please contact us immediately at legal@greeenflaggames.com.

Games specifically designed for children do not use behavioral advertising and comply with all applicable children's privacy laws globally.

11 Advertising (Google AdMob)

Some of our free games are supported by advertising provided by Google AdMob. We are committed to responsible advertising practices.

• Personalized Ads: Only served after obtaining your explicit consent via our in-game consent dialog, compliant with IAB TCF 2.2.
• Non-Personalized Ads: If you decline personalized ads, non-personalized ads may still be shown. These do not use behavioral data.
• Ad Identifier: Google AdMob may access your device's Advertising Identifier (Android: Google Advertising ID) when consent is given.
• No Ads to Children: In games designated as family-friendly, we serve only family-safe, non-behavioral ads per Google's Families Policy.

For full details on how Google AdMob processes data, see our AdMob Privacy Policy and Google's Privacy Policy.

To opt out of personalized ads on Android: Settings → Google → Ads → Opt out of Ads Personalization.

12 International Data Transfers

Our Services use infrastructure provided by Google (Firebase, hosting infrastructure), which may process your data in data centers located in the United States and other countries. These transfers are protected by:

• EU Standard Contractual Clauses (SCCs) adopted by the European Commission
• Google's Data Processing Agreement with appropriate safeguards

By using our Services, you consent to the transfer of your information to countries outside your country of residence, including the United States, which may have different data protection rules.

13 Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data in transit
• Firebase Security Rules limiting data access
• Role-based access controls for our admin panel
• Regular security reviews

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

14 Cookies & Tracking Technologies

We use cookies and similar tracking technologies on our website. You can manage your cookie preferences at any time using our Cookie Consent tool.

For detailed information about the specific cookies we use and how to control them, please see our Cookie Policy.

15 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on our website for significant changes
• Where required by law, obtain your consent for material changes

We encourage you to review this policy periodically.

16 Contact Us