Flappy Crush is a free, ad-supported mobile game for iOS and Android, developed and published by Tarek Mongy, trading as TM Apps & Games (“we”, “us”). This policy explains what information the game collects, how it is used and shared, how long it is kept, and how you can have it deleted.
1Information we collect
Game progress
Your progress, settings and purchased items are saved on your device. If you are signed in to Google Play Games (Android) or iCloud (iOS), the game also backs this save up there so it can be restored on a new device. That backup is stored by Google or Apple under your account.
Weekly competition
The weekly competition runs on our own server. When you play in it, the game sends:
- A random player ID created by the game. It is not linked to your name, email or device hardware.
- Your display name: your Game Center (iOS) or Google Play Games (Android) player name if you are signed in; otherwise a name the game generates, such as “Totally Crusty Pipe”.
- Your country, from your device’s region setting or estimated from your IP address with an offline lookup. We do not store your IP address for this.
- Your platform (iOS or Android) and app version.
- Your results: game mode, score, birds crushed, run length, best combo and coins earned, plus your league, points and trophies.
- The Firebase Analytics app instance ID (see section 2), used to detect cheating and fake purchases.
Your display name, country flag, league and scores are shown to other players on the leaderboards.
Purchases
In-app purchases are processed by Apple or Google; we never receive your payment details. The game records which items you bought and reports purchase events (item, price and currency) to Firebase Analytics. To detect fake purchases, our server counts how many purchases the game reported and how many were verified, linked to the Firebase app instance ID, your platform and country.
Ad campaign measurement (Android)
If you installed the game after tapping one of our ads, Google Play passes the game an “install referrer” that identifies the campaign. The game sends it to our server with the Firebase app instance ID so we can see which campaigns bring in players.
Collected by third-party services
The services in section 2 may automatically collect:
- IP address and approximate location (country or city)
- Device identifiers: the Advertising ID (Android), the IDFA (iOS, only if you allow tracking) and app instance IDs
- Device model, operating system version, language and app version
- How you use the game: sessions, modes, ad views and purchases
- Crash reports and performance diagnostics
2Third-party services
These services act as our providers and handle data under their own privacy policies:
| Service | What it does | Policy |
|---|---|---|
| Firebase Analytics & Crashlytics | Usage and purchase analytics; crash reports | Firebase |
| Appodeal | Ad mediation, with partner networks including Google AdMob, AppLovin, Meta Audience Network, Unity Ads, ironSource, Mintegral, Liftoff (Vungle), InMobi, Pangle and Amazon | Appodeal |
| Meta (Facebook) SDK | App events (installs, app opens, purchases) to measure our ads on Facebook and Instagram | Meta |
| Game Center / Google Play Games | Sign-in, player name and saved-game backup | Apple, Google |
| App Store / Google Play Billing | Payments for in-app purchases | Apple, Google |
| Railway & Cloudflare | Hosting for our competition server; standard server logs, which include IP addresses, are kept briefly for security and operations | Railway, Cloudflare |
3How we use information
- To run the game and the weekly competition: rankings, leagues, prizes and trophies.
- To prevent cheating, fake purchases and abuse.
- To understand how the game is played and improve it.
- To find and fix crashes.
- To show ads, which keep the game free, and to measure our own ad campaigns.
We do not sell your personal information. We share it only with the providers in section 2, on the public leaderboards as described above, or when required by law.
4Ads, tracking and your choices
- Where required by law (for example in the EU, UK and Switzerland), the game asks for your consent before personalized ads are shown.
- iOS: the game asks permission before tracking. Change it any time in Settings > Privacy & Security > Tracking.
- Android: reset or delete your Advertising ID, or opt out of personalized ads, in Settings > Google > Ads (or Settings > Privacy > Ads).
- Uninstalling the game stops all data collection by the game.
5How long we keep data
| Data | Kept for |
|---|---|
| Weekly competition results | 52 weeks |
| Player record | Display name, country, league, points, all-time records and trophies: while the competition runs, unless you ask us to delete it |
| Score statistics | 14 days (individual scores, not linked to a player) |
| Install referrer & purchase checks | Only as long as needed to measure campaigns and prevent fraud, or until you ask us to delete them |
| Firebase Analytics | According to our Firebase data-retention setting, then deleted by Google |
| Crashlytics crash reports | 90 days |
| Advertising partners | According to their own policies (section 2) |
| Data on your device | Until you uninstall the game |
6Deleting your data
Email us with the subject “Flappy Crush data deletion”. Include the name shown for you on the competition screen and your platform (iOS or Android). We will delete your player record, results, trophies and the identifiers linked to them within 30 days and confirm by email.
Request deletionFor data held by the services in section 2, you can also use the controls they provide.
7Security
All communication with our server is encrypted (HTTPS), competition submissions are signed to prevent tampering, and access to the server and its data is restricted to the developer. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
8Children
Flappy Crush is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will delete it promptly.
9Your rights
Depending on where you live (for example under the GDPR, UK GDPR or CCPA), you may have the right to access, correct or delete your personal information, to object to or restrict its processing, and to withdraw consent. We do not sell or “share” personal information as the CCPA defines it. Our server and providers may be located outside your country and process data only for the purposes in this policy. To exercise any of these rights, contact us below.
10Changes and contact
We may update this policy from time to time. Changes are posted on this page with a new “Last updated” date.
TM Apps & Games (Tarek Mongy)
Email us · tarekmongy.com/contact