Privacy Notice

The short version

• You can sign in to our website with Discord or Steam. We keep your Discord or Steam name, picture and ID number so we know who you are. If you sign in with Discord, Discord also gives us your email address.
• We keep your points, and any bug reports or votes you send us.
• You only appear on our public leaderboard if you tick "Show me on the leaderboard" on your profile page.
• When the game crashes, or when you send a bug report from the game, it sends us a report with the game's log. That log can include your Windows user name, because it is part of a folder name.
• We do not sell your data. We do not show you adverts. We do not use tracking cookies.
• You can ask us to show you everything we have about you, or to delete it. Email [email protected].

The rest of this page gives the detail.

1. Who we are

Flat Frog Games is the trading name of Flat Frog Limited, a company registered in England and Wales (company number 16969746). Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

We are the "controller" of the data on this page, which means we decide what happens to it. For anything about your data, email [email protected]. We are a very small studio, so the person who reads it is the person who can act on it.

2. What we keep, why, and for how long

Data protection law says we need a legal reason, called a "lawful basis", for each thing we keep. For each item below we give the reason we rely on:

• Contract: you asked for something, such as an account, and we need the data to give it to you.
• Legitimate interests: we need it to run and fix our games and services, and we have checked that this does not outweigh your interests.
• Consent: you chose to give it, and you can change your mind at any time.

Your flatfrog.games account

• What: your Discord ID, name and picture, and your email address if you sign in with Discord. Your Steam ID, name and picture if you sign in with Steam or link it.
• Why: to sign you in, to link your Discord and Steam accounts, and to show your name and picture on your profile.
• Lawful basis: contract.
• How long: until you ask us to delete your account.

If you are in our Discord server and earn points there without ever signing in to the website, we still keep a small record with your Discord ID and name, so your points are not lost. We rely on legitimate interests for this. You can ask us to delete it.

Points and the leaderboard

• What: your points, a history of how you earned them, the number of bugs and ideas you reported, and when you joined. A points entry can mention another player's name, for example who won a duel.
• Why: to run the points feature and the leaderboard.
• Lawful basis: contract. For Discord members who have not signed in to the website, legitimate interests. Appearing on the public leaderboard is your choice (consent).
• How long: as long as your account exists.

The leaderboard at flatfrog.games/leaderboard is public. You are only on it if you tick "Show me on the leaderboard" on your profile page, and you can untick it at any time. If you are on it, anyone can see your name, picture, points, rank and the month you joined. Your picture is loaded from Discord, and the web address of a Discord picture contains your Discord ID.

Our Discord server and bot

• What: your Discord ID and name, when you joined our server, your duel results, and the riddles you asked. When you post a bug in our Discord forum, the bot copies your post, your Discord name and any attachments into our private bug tracker.
• Why: to run the server's points, duels and riddles, and to turn bug posts into issues we can fix.
• Lawful basis: legitimate interests.
• How long: duel results for 90 days. The rest until you ask us to delete it. Files we copy from forum posts for 180 days.

The bot uses Google Gemini, an AI service, to sort bug posts and to write some of its replies. Gemini receives forum bug posts and the replies to them, with their pictures and the Discord names of the people who wrote them; messages that mention the bot, with your Discord name; and the Discord names in duel results and anniversary posts. When you vote on a bug, the bot may mention you in our Discord server. It also posts duel results and server anniversaries there, which anyone in the server can see. Files from forum posts are stored so that anyone with the link can open them. Messages you post in Discord are held by Discord: see section 4.

Bug reports from the website

• What: your account ID, Discord ID and name, the bug title and description, any files you attach, and the bugs you vote on.
• Why: to fix our games, to show you your own reports, and to give you points for them.
• Lawful basis: legitimate interests.
• How long: attached files for 180 days. The report itself for as long as we support the game. If you ask, we remove your name and Discord ID from it.

Your report goes into our bug tracker, Jira, with your Discord name and ID. Jira is private. The title you write is shown on our public bug backlog, but your name is never shown there.

Files you attach can be opened by anyone who has the link. Our bug tracker uses the link to show them. Do not attach anything you would not want others to see. If you attach a game log, it may contain your Windows user name.

Bug reports from inside the game

• What: the bug title and description, the game version, your operating system, the game's log, and a screenshot if you include one. The report itself does not include your name, Steam ID or account. The copy sent to Sentry also carries the IDs and approximate location described under Crash reports.
• Why: to fix the game.
• Lawful basis: legitimate interests.
• How long: the log for 180 days. The report and screenshot for as long as we support the game. The copy in Sentry for 30 days.

The report goes to two places. Our bug tracker gets the report, the screenshot and a copy of the log with your Windows user name removed. That log copy is stored so that anyone with its link can open it, so our bug tracker can show it. Sentry, our crash reporting service, also gets the report and the full log, which can still contain your Windows user name (see Crash reports below).

Crash reports

• What: when the game crashes or hits a serious error, it sends a report to Sentry, our crash reporting service. The report holds details of the error and your computer, such as the operating system, processor, graphics card, memory, screen size, language and time zone. It also holds an ID for your copy of the game, an ID for your computer, the options the game was started with, your approximate location (country, region and city, worked out from your internet address, which is not kept), and the game's log. That log can contain your Windows user name, because it is part of the folder name where the game saves.
• Why: to find and fix crashes.
• Lawful basis: legitimate interests.
• How long: 30 days. Sentry then deletes it.

We are changing the game so that it removes your Windows user name before a crash report or bug report is sent to Sentry. We will update this page when that is done.

Server logs

• What: our servers record what they do, which can include your account ID, Discord ID, Steam ID or name.
• Why: to keep our services running and to fix problems.
• Lawful basis: legitimate interests.
• How long: 30 days at most.

Key requests from creators and press

• What: your email address, your Discord and Steam names, your channel link and audience size, your reason for asking, and our notes and decision.
• Why: to decide on your request and send you a key.
• Lawful basis: legitimate interests.
• How long: 2 years after your request. We check every three months and delete what has passed that point.

We email you about your request, and we may email approved creators with news about the game. Every such email lets you stop them.

Emails and messages to us

• What: your name, email address and whatever you write to us, whether you email [email protected] or use a contact form on this site.
• Why: to reply to you.
• Lawful basis: legitimate interests.
• How long: 2 years after your last message. We check every three months and delete what has passed that point.

Email to hi@ passes through Google, which sends it straight on to our support inbox at HubSpot. Google does not keep the email in a mailbox, but it does keep a record of who sent it and its subject for up to 6 months. HubSpot holds your messages, our replies and a contact record with your name and email address, on its servers in the EU. We do not use HubSpot's tracking on this website. If an email we send you bounces or is marked as spam, we keep your address on a "do not send" list for as long as we need it, so we do not email it again.

We do not send newsletters or marketing email. If we ever start, you will only get them if you ask for them.

Player survey

• What: the answers you give in the survey linked from the game, which is a Google Form.
• Why: to learn what players think of the game.
• Lawful basis: consent. The survey is optional.
• How long: 1 year. We check every three months and delete what has passed that point.

Visiting this website

• What: this website runs through Cloudflare, which sees your internet address and browser details so it can deliver the page and block attacks. When you sign in, your browser stores sign-in tokens for up to 30 days so you stay signed in.
• Why: to deliver the website securely and keep you signed in.
• Lawful basis: legitimate interests.
• How long: sign-in tokens for up to 30 days, or until you sign out.

We do not use analytics, advertising or tracking cookies. The only things we store in your browser are the ones needed to sign you in, so we do not need to ask for cookie consent.

Backups

Some of our databases keep automatic backups for 35 days. When we delete something, a copy can remain in those backups until they expire.

Staff and contractors

If you work with us, we hold your work email address and sign-in details for our internal tools for as long as you work with us.

3. Who else handles your data

These companies store or process data for us:

• Amazon Web Services: our servers, database, file storage, server logs and sign-in system. In London.
• Sentry: crash reports, and bug reports from the game. Stored in Germany.
• Cloudflare: delivers this website.
• Atlassian (Jira): our bug tracker.
• GitHub: our private code and issue tracker, which holds bugs posted in our Discord forum.
• Google: passing on email sent to hi@, and the player survey.
• Google Gemini: an AI service our Discord bot uses to sort bug posts and write some of its replies.
• HubSpot: our support inbox.

Some of these companies are based in the United States, so your data may be handled there. When it is, we rely on the safeguards in that company's data protection terms, such as the UK's data bridge with the United States or the UK's approved data transfer contract terms.

We may also share data if the law requires it, for example a court order.

4. Steam and Discord

Steam (run by Valve) and Discord run their own services and decide for themselves what they do with your data. We only receive what this page describes. For anything they hold, such as your Steam purchases or your Discord messages, read their privacy policies and contact them directly:

• Steam privacy policy
• Discord privacy policy

5. Young players

You need to be 13 or older to use Discord or Steam, and so to sign in here. If you are under 18, we try to keep things simple and private: you are hidden from the leaderboard unless you choose to show yourself, and we send no marketing. If anything on this page is unclear, ask a parent or carer, or email us and we will explain.

6. Your rights

You have the right to:

• get a copy of the data we hold about you;
• have it corrected if it is wrong;
• have it deleted;
• ask us to stop using it, or to limit how we use it;
• object to us using it where we rely on legitimate interests;
• receive the data you gave us in a form you can take elsewhere;
• withdraw your consent at any time, where we rely on consent.

To use any of these, email [email protected], preferably from the account or Discord name involved, so we can check it is you. It is free, and we reply within one month. When we delete your data, we remove it from every place on this page that we control, apart from these: server logs and backups are not edited, but they expire within 30 and 35 days; your emails to hi@ can stay with HubSpot, our support inbox, for up to 30 days after we delete them; Google keeps a record of each email you sent to hi@, showing who sent it and its subject, for 30 days in one log and 6 months in another, and we cannot delete these records sooner; a file copied from a Discord forum post that we cannot trace to you expires after 180 days; and an old copy of some Discord bot data in our private code history is still being removed. For a crash report, tell us roughly when the crash happened, because crash reports do not carry your account or Discord name.

We do not make decisions about you by automated means alone.

7. Complaints

If you are unhappy with how we handle your data, please tell us first at [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

8. Changes to this notice

When what we keep changes, we update this page and the date at the top.