Privacy Policy

1. Who we are

Flick Football is an online multiplayer flick football game developed and operated by Tanvir Mahin (“we”, “us”, “our”) and published on Google Play under the developer name inovit-bd. We are responsible for the personal data processed through the service. You can reach us at tanvirmahin24@gmail.com.

2. Information we process

2.1 Nickname, avatar and flag

You choose a nickname, an avatar emoji and the flag of the country you play for. We suggest a flag based on your device’s time zone and language settings, which are read on your device and not sent to us; only the flag you pick is stored. If you leave the nickname empty, we give you a random one that you can change later. Your nickname, avatar and flag are visible to other players in the same match room, including opponents that Quick Match finds for you, and appear in their match history. In match rooms, other players also see your level, your supporter badge if you have Premium, and the disc set you play with, and your formation decides where your discs stand at kickoff. Your nickname, avatar and flag also appear on the in-game leaderboards (section 2.5) and in goals you share (section 2.6).

2.2 Player ID and access token

When you sign up, our server assigns you a Player ID (a numeric account ID) and creates a secret access token that lets you use your account. The token is stored on your device, in the app’s or your browser’s local storage. Our server stores only a SHA-256 hash of the token, never the token itself.

You don’t need an email address, password or phone number to play.

2.3 Match records

For each match, we store the date, the game mode, the participants’ nicknames and avatars, the goals each scored and their placements. We use these records to show your stats (matches played, wins, goals and your best match) and your recent match history.

2.4 Game progress

As you play, we store your progress with your Player ID: your gold balance; the disc sets you own, their levels and the one you’ve equipped; your flag and formation; your XP and level; your ranked rating and the number of ranked matches you’ve played; the date you last collected the free daily gold; and your daily trick-shot results (the date and time you played, your score and whether you finished). We use this to give you rewards, run Quick Match ratings, the daily trick shot and the leaderboards, and keep your disc sets and gold.

2.5 Leaderboards

Flick Football has in-game leaderboards for ranked rating, for level and for each day’s trick shot. They list the top players, with each player’s nickname, avatar, flag and supporter badge next to their rating, level or score, and other players can see them. You can appear on the rating leaderboard after your first ranked match, on the level leaderboard once you’ve earned XP, and on a day’s trick-shot leaderboard once you’ve finished that day’s trick shot. These are separate from the Google Play Games leaderboards in the Android app (section 2.11).

2.6 Shared replays

At the end of a match you can choose to share your best goal. If you do, we store that goal (where the discs and the ball were before the flick and how they moved) together with your nickname, avatar, flag, supporter badge and disc set, your side of the pitch, the game mode, how many times the ball banked off a wall and the time, and give you a link (/play/?replay=…). Anyone with the link can watch the replay in a browser, without an account. We keep shared replays until you delete your account, which deletes them too. Nothing is stored if you don’t share: the slow-motion replay of the winning goal at the end of a match plays from data your device already has.

2.7 Live gameplay data

While you play, our server processes room codes, Quick Match searches, your flicks and aim, and emote reactions. Emotes are preset emojis only — there is no free-text chat. This data is processed in memory, in real time, and is discarded when the room closes, unless you share a goal (section 2.6).

2.8 Technical data

To deliver the service to your device, we have to process your IP address and connection metadata. This processing is transient. Our game server does not write IP addresses to its application logs. Our website and game traffic pass through Cloudflare, our network and security provider, and the game server runs on a rented virtual server; these providers may keep standard access and security logs for a limited period (typically up to 30 days).

2.9 Friends and invites

If you use friends, we store your friend connections: the Player IDs of your friends, friend requests you send or receive, and players you block. Your friends can see your nickname, avatar, flag and online status (offline, online, in a lobby or in a match), and can invite you to a match room while you’re online. Invites are delivered in real time and are not stored. You can remove a friend, decline a request or block a player at any time; blocked players can’t send you requests or invites.

2.10 Purchases

The Android app offers optional purchases: Premium (the Supporter Pack), a one-time purchase that removes ads, unlocks all premium disc sets, adds 5,000 gold, gives you the free daily gold without an ad and adds a supporter badge; and gold packs of in-game gold. Payment is handled entirely by Google Play under Google’s terms and privacy policy: we never see your card, bank or billing details. After a purchase, Google Play gives the app a receipt signed by Google, and the app sends it to our server, which checks Google’s signature and credits your account. We store the receipt’s purchase token, order number, product and purchase time with your Player ID, along with your supporter status and whether your account has received Premium’s 5,000 gold. Other players see your supporter badge and your disc set in match rooms. If you reinstall the app, Google Play gives it your earlier Premium purchase again and the app restores Premium automatically. Gold packs are used up once their gold has been added to your account. Nothing can be bought in the browser version.

2.11 Google Play Games

In the Android app you can use Google Play Games achievements and leaderboards (“Most Wins” and “Most Goals”). Google Play Games is operated by Google under the Google Privacy Policy. If you’re signed in to Play Games on your device, achievements you unlock and the scores the app posts are sent to Google with your Play Games profile, and other players may see your Play Games name and scores on leaderboards depending on your Play Games settings. Connecting your account. You can connect your Flick Football account to Google Play Games, from the home screen or Settings; the app asks you to before a purchase, so what you buy can’t be lost with your phone. When you do, the app gets a one-time code from Google Play Games, and our server uses it to ask Google for your Play Games player ID, which we store with your account. If you reinstall the app or play on another phone, signing in to Google Play Games brings that account back, and each device it’s restored on gets its own access token (we store only a hash of it, as in section 2.2). We don’t receive your email address, your Google account details, or your Play Games friends or activity. Like other Google Play libraries in the app (purchases and app updates), the Play Games library may also send Google diagnostic and usage data about the library itself, which Google uses to keep its services working; see the Play Games data disclosure.

2.12 Ratings and app updates

The Android app may show Google Play’s in-app rating prompt and offer to update itself when a newer version is available. Both are provided by Google Play; we don’t receive your rating or any information from them beyond the public reviews you choose to post on Google Play. If your version of the app is too old to play online, the game asks you to update it first; this check compares version numbers on your device.

3. Ads

Flick Football is free to play and is paid for by ads. If you don’t have Premium, you may see a full-screen ad when a match ends, and once a day you can choose to watch a rewarded ad to collect free gold. After a win you can also choose to watch one to double that match’s gold. If you have Premium, you don’t see ads and the game doesn’t request any for you. The ads are provided by Google, which collects and uses information as described below and in the Google Privacy Policy; see also how Google uses information in advertising and how Google uses information from sites or apps that use its services. We don’t pass your Player ID, nickname or any other account data to Google’s ad services.

3.1 In the Android app: Google AdMob

The Android app shows ads with the Google Mobile Ads SDK (AdMob). The SDK collects the following information from your device and shares it with Google for advertising, analytics and fraud prevention:

• device identifiers: your device’s advertising ID and app set ID;
• your IP address, from which Google may estimate your approximate location;
• how you interact with ads and the app, such as ad views, taps and app launches; and
• diagnostic and performance information about the app and the SDK.

Depending on where you are and the choices you make, Google may use this information to show you personalised ads. The app has the AD_ID permission so that the SDK can read your advertising ID (section 11).

3.2 In your browser: Google AdSense

When you play at /play/ in a web browser (not in the Android app), the game may show Google AdSense game ads: an ad between matches, and optional rewarded ads for the free daily gold and to double a win’s gold. Google, and the third-party vendors and ad networks it works with, use cookies and similar technologies to serve and measure these ads, including ads based on your earlier visits to this website or other websites. Google’s use of advertising cookies lets it and its partners show you ads based on your visits to this site and/or other sites on the internet. Google also receives your IP address and information about your browser and device. If your browser blocks ads, the game simply doesn’t show them. Apart from Google’s ads, the game doesn’t use cookies to track you; it keeps your account and settings in your browser’s local storage (section 4).

3.3 Consent and your choices

• Consent. In the European Economic Area, the UK and Switzerland, and anywhere else the law requires it, Google’s consent message asks for your choice (in the app it comes from Google’s User Messaging Platform). If you don’t consent, Google won’t use your data to personalise ads, but you may still see non-personalised or limited ads.
• Ad privacy choices. The Ad privacy choices button in Settings lets you review or change your choice at any time. In the browser it appears whenever ads are on; in the Android app it appears where the law requires a way to change your consent.
• Advertising ID. On Android you can reset or delete your advertising ID, or opt out of personalised ads, in your device settings (usually under Privacy → Ads, or Google → Ads).
• Personalised ads from Google. You can turn off personalised ads in Google’s ad settings (My Ad Center), and opt out of some third-party vendors’ use of cookies for personalised advertising at aboutads.info.
• Premium. Premium, bought in the Android app, turns ads off completely for your account.

4. Information stored on your device

The app — or your browser, if you play at /play/ — stores:

• your access token, so you stay signed in to your account;
• your preferences: sound on/off, vibration on/off, your pitch theme, the flag you picked when signing up, and the mode you last picked for bot matches and Quick Match;
• the latest game version you’ve seen, so “What’s new” is shown once after an update; and
• a count of matches played and when the app last asked you for a rating, so it asks rarely.

If you’re shown ads, Google’s ad and consent tools also store information on your device, such as your consent choices and, in a browser, cookies (section 3).

Clearing the app’s data, uninstalling the app or clearing your browser’s site data removes this information from your device. It does not delete your account from our server — see section 10 for how to do that.

5. Information we don’t collect

We do not collect your:

• email address, phone number or real name;
• your phone’s contacts or address book (your in-game friends list is described in section 2.9);
• precise location (the flag you play under is your own choice, and Google’s ads may estimate an approximate location from your IP address; see section 3);
• photos or files; or
• payment card or bank details (Google Play handles payments).

Flick Football has no analytics SDKs of its own, and our game server never receives your advertising ID. The ads come from Google’s ad technology (section 3), and the Android app also includes Google Play’s own libraries for purchases, Play Games and app updates; these work under Google’s privacy policy (sections 2.10 to 2.12).

6. How we use information

We use the information described above only to:

• create and maintain your account;
• match you with friends through room codes, and with other players through Quick Match;
• run gameplay in real time;
• let you add friends, see when they’re online and invite them to matches;
• show your stats, match history, level and progress, and run ranked ratings, the daily trick shot and the leaderboards;
• keep your gold, disc sets, flag and formation, and credit the rewards you earn;
• store and show the goals you choose to share;
• unlock and restore Premium, and credit the gold packs you buy;
• show Google’s ads to players without Premium, and give you the free daily gold, or double a win’s gold, after a rewarded ad; and
• keep the service secure and prevent abuse, such as cheating or using several accounts to boost ratings or collect gold.

7. Legal bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases under the GDPR:

• Performance of a contract — to provide the game you asked to use: your account, matchmaking via room codes and Quick Match, gameplay, your progress, stats and match history, the leaderboards and the goals you share (see our Terms of Service), including unlocking Premium and crediting gold packs you bought.
• Consent — for the ads Google shows to players without Premium, where the law requires consent (section 3.3). You can withdraw your consent at any time with Ad privacy choices in Settings.
• Legitimate interests — to keep the service secure and prevent abuse, and to fund the free game with ads (for example, the non-personalised ads Google may show if you don’t consent). You can object to this processing (see section 10).

8. Sharing

We don’t sell your personal data for money (for how ads are treated under some US state laws, see section 10). We only disclose it:

• to service providers that deliver and host the service (Cloudflare for the website and network delivery, and our server hosting provider for the game server and database), acting on our behalf and under our instructions;
• to Google for ads, if you don’t have Premium: Google’s ad technology collects information directly from your device, as described in section 3, and Google uses it under its own privacy policy;
• to Google, when you choose to use Google Play features in the Android app: purchases (section 2.10) and Play Games achievements, leaderboards and account connection (section 2.11); or
• where we are required to do so by law.

Other players can see your nickname, avatar, flag, level, badge and disc set as described in section 2.1, and your place on the leaderboards (section 2.5). Your friends can also see your online status (section 2.9), and anyone with the link to a goal you share can watch it (section 2.6).

9. How long we keep information

• Account, match history and game progress (gold, disc sets, flag, formation, level, rating and trick-shot results): until you delete your account.
• Shared replays: until you delete your account, which deletes them too.
• Friend connections, requests and blocks: until you or the other player remove them, or either account is deleted.
• Purchase records (Premium and gold packs): until you delete your account. Google Play keeps its own record of the purchase, so you can restore Premium on a new account.
• Google Play Games link and device sign-ins: until you delete your account.
• Live gameplay data: deleted when the room closes.
• Infrastructure logs: kept by our hosting/infrastructure provider for a limited period, typically up to 30 days (see section 2.8).
• Ads data: collected and kept by Google under the Google Privacy Policy; we don’t store it.

10. Deleting your account and your rights

Delete in the app. Open Settings (⚙️), tap Delete account and confirm. Your account is deleted immediately and permanently.

Delete by email. Email tanvirmahin24@gmail.com with your Player ID (shown in Settings). We handle email requests within 30 days. Step-by-step instructions are on our Delete account page.

Deleting your account removes your nickname, avatar, flag, Player ID, token hash, all your match records and stats, your game progress (gold, disc sets, formation, XP and level, ranked rating and trick-shot results), the replays you’ve shared (their links stop working), your purchase records, the link to your Google Play Games account and the sign-ins of every device it was restored on, and your friend connections, requests and blocks. Your entries also disappear from other players’ match history and friends lists, and from the leaderboards. Unspent gold is lost.

Your rights. Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct it — you can change your nickname, avatar and flag in the app at any time;
• delete it;
• object to processing based on our legitimate interests; and
• withdraw your consent to ads at any time, with Ad privacy choices in Settings.

To exercise these rights, email tanvirmahin24@gmail.com and include your Player ID. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

California residents (CCPA/CPRA) and other US states. We don’t sell your personal information for money. Google’s ads, which players without Premium see, may use information such as your advertising ID, IP address and ad interactions for personalised advertising, which California and some other US state laws may treat as “selling” or “sharing” personal information. You can opt out of this: use Ad privacy choices in Settings where it’s offered, reset or delete your advertising ID or opt out of personalised ads in your Android settings, turn off personalised ads in Google’s ad settings (section 3.3), or get Premium, which turns ads off. You can also use the rights above to access, correct or delete your information, and we will not discriminate against you for exercising them. You can make a request yourself or through an authorized agent; we verify requests with your Player ID, may ask you to confirm a request an agent makes for you, and respond within 45 days. We don’t collect sensitive personal information as these laws define it.

11. Android permissions

The Android app requests these permissions. Several are added by Google’s ads SDK:

• INTERNET — to connect to the game server, and to Google for ads and Google Play features.
• VIBRATE — for haptic feedback.
• ACCESS_NETWORK_STATE — to notice when your connection comes back so the game can reconnect, and used by Google’s libraries to check for a connection.
• com.android.vending.BILLING — to buy Premium and gold packs through Google Play.
• com.google.android.gms.permission.AD_ID — lets the Google Mobile Ads SDK read your device’s advertising ID (section 3.1).
• ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_ATTRIBUTION and ACCESS_ADSERVICES_TOPICS — added by the Google Mobile Ads SDK so it can use Android’s Privacy Sandbox advertising features on devices that have them. You can manage these in your device’s ad privacy settings, where available.
• WAKE_LOCK and FOREGROUND_SERVICE — added by libraries the ads SDK uses (including Android’s WorkManager) to run background tasks.

12. Security

We encrypt data in transit using HTTPS and secure WebSockets (WSS), and we store access tokens at rest only as SHA-256 hashes. No system is 100% secure, so we can’t guarantee absolute security, but we work to protect your information.

13. Children

Flick Football is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has used Flick Football, contact us at tanvirmahin24@gmail.com and we will delete the account.

14. International transfers

Your data may be processed in the country where our server is hosted, which may be different from the country where you live. Google, which provides the ads and Google Play features, processes data in other countries as described in the Google Privacy Policy.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we’ll post the new version on this page and update the effective date at the top. If the changes are significant, we’ll make reasonable efforts to let you know, for example with a notice in the game.

16. Contact us

Questions about this policy or your data? Contact Tanvir Mahin at tanvirmahin24@gmail.com.