The Flag Slice Privacy Policy

Signed-in accounts

Apple or Google supplies a stable provider identifier. The Flag Slice does not use email as the account key. We store username, theme preference, and submitted results. Provider identity tokens are verified and not stored.

Game results

When you finish a daily set, the app sends your guesses, the hints you took, and their timing. The server replays them to work out your score, so a score cannot be invented on the device. Clue and answer reveals are recorded when you ask for them, for the same reason.

Usernames and moderation

A public username is optional and is only needed to appear on the daily, weekly, monthly, and yearly leaderboards, including as a yearly champion. It is checked against a word filter when you choose it, then screened by an automated moderation step that runs on our own servers; your username is not sent to any outside AI provider.

Names that the automated step flags, or that another player reports, are reviewed by a person at Leon Frontier. For each reviewed name we keep the name, the automated assessment, and whether it was approved or blocked. A blocked name is removed from leaderboards.

Reporting and blocking

If you report a username, we store the reported name, the reason you chose, when you reported it, and your account or installation identifier, so the same report cannot be filed twice. The reported player is never told who reported them.

If you block a player, we store a record that your account or installation has blocked theirs. It is used only to hide that player from your leaderboards, and the blocked player is not told. If you sign in after reporting or blocking as a guest, those records move to your account.

Device integrity checks

To keep leaderboards fair, the app may ask Apple's App Attest or Google's Play Integrity service to confirm that it is a genuine copy of The Flag Slice running on a genuine device. We store the outcome of that check and, on iOS, a public key for the installation. These checks do not identify you and are not used for advertising.

Diagnostic logs

The app sends sanitised operational events to diagnose failures and interrupted flows. Tokens, provider assertions, usernames, email addresses, guesses, answers, and raw bodies are redacted. Logs are access-controlled, rate-limited, rotated, and bounded.

Notifications

Any player, guest or signed in, may opt into a daily reminder, sent at 9:00 in your local time. We store an Expo push token, platform, IANA timezone, opt-in state, and delivery outcome. A guest's reminder belongs to that installation and moves to your account when you sign in. Campaign and delivery identifiers prevent duplicate sends. Turning reminders off stops them, and deleting your account or guest data removes the destination.

Advertising

The Flag Slice is supported by Google AdMob. Banners can appear on the home screen, during play, and on the daily summary; one interstitial may appear after a completed game; rewarded videos are optional and player-initiated. A Remove Ads subscription hides the banners and the interstitial; rewarded videos stay available.

Google's User Messaging Platform resolves consent before an ad is requested. If you decline, no ad is requested. Privacy choices can be reopened from Settings.

On iPhone and iPad, The Flag Slice asks for Apple's permission to track (App Tracking Transparency) the first time you open it, before any ad is requested. If you do not allow it, ads are always non-personalised. You can change this at any time in iOS Settings → Privacy & Security → Tracking.

On both iOS and Android, ads are personalised only where consent is not required in your region, or where you have agreed in the consent form to storing information on your device, creating a personalised ads profile, and selecting personalised ads; on iOS you must also have allowed tracking. Otherwise ads are non-personalised. You can change your consent choice at any time from Settings → Privacy choices.

Google may process IP-derived coarse location, device type, operating system, advertising identifier, and ad interactions for delivery, frequency capping, fraud detection, and, where you allow it, ad personalisation. Where you allow tracking on iOS, the advertising identifier may be used to link your activity in The Flag Slice with data from other companies' apps and websites for advertising. We do not send username, account ID, game results, streak, or leaderboard position to advertising partners.

Remove Ads subscription

If you subscribe to Remove Ads, the App Store or Google Play processes the payment; we never receive card details. We store the store's subscription identifier, the plan, when it was bought and when it expires, and link it to your installation or account so the server can decide whether ads are shown. Apple and Google tell us about renewals, cancellations, and refunds. The record is kept after account deletion, without your account or installation identifiers, for refunds, fraud prevention, and accounting.

Rewarded verification

A single-use random identifier is sent to Google when you choose a rewarded video. Google's signed completion confirms it to the server. It contains no username or contact information. Expired unverified IDs are deleted; verified records are retained with game-integrity records to prevent replay.

Retention and deletion

Profile → Danger zone removes local guest data or a signed-in account. Account deletion removes username and provider link, session credentials, moderation copies, and push destinations. De-identified history and aggregate outcomes may remain for integrity, fraud prevention, and statistics.

Once an account is deleted it no longer appears on any leaderboard, including as a past yearly champion.

Reports and blocks you made, and reports and blocks about you, are deleted along with your account. Deleting guest data deletes the reports and blocks made from that installation.

Privacy questions

For access, deletion, or other privacy requests, email hello@leonfrontier.com.