Privacy policy

Last updated: 2 October 2026

This policy explains what information the games of FlagOfGames (“we”) collect and why. It covers B-Star: Galaxy King (com.flagofgames.galaxyking) and B-Star: Colony Wars (com.flagofgames.buildfight) on Android, and the website at flagofgames.com/play. This policy also covers tester registrations submitted through our website. Contact: support@flagofgames.com.

The short version

• We do not ask for your email, phone number, contacts, location or photos to play, and playing offline needs no account.
• Online play is optional. When you open it, the game makes a guest account for you and our server keeps an online profile (section 5). You can delete it inside the game.
• Offline saves remain on your device, but Online sends your offline XP and unlocked maps to our server to calculate your online Level and room access. Android may also back up app data (section 1).
• The Android apps show ads from Google AdMob. Firebase Analytics and Firebase Crashlytics are planned but are not active in the current builds.
• Feedback and tester registrations are sent only when you choose to submit them.
• We do not sell personal information.

1. Information saved on your device

The games save your progress (levels, ranks, coins, unlocked galaxies and records), your settings (language, sound, difficulty, planet size, frame rate), the name you type for your planet, and a short performance log (slow frames and camera corrections, the last 30 entries). Offline saves remain in the app’s storage on your device, or in your browser for browser game builds. When you use Online, we send your offline XP and unlocked maps to our server to calculate your online Level and room access. We also receive the parts you choose to include in feedback (section 4).

Depending on your Android backup settings, app data may be backed up or transferred by Android and restored after reinstalling; uninstalling removes the local copy but may leave a system backup. Clearing the site’s data in your browser removes its local data.

At launch, the Android apps ask Google Play whether an update is available; Google Play processes device metadata, the app version and installed modules or asset packs to answer this request. The apps read this app’s installer name and version locally to show its installation source and update notices, and store reminder timestamps and the installer already notified on your device.

The games use your device’s vibration motor for gameplay feedback; you can turn this off in settings, and vibration itself sends no data.

2. Advertising (Android apps)

The apps show ads, including optional rewarded ads you choose to watch, served by Google AdMob. When ads are requested or loaded, including preloading before you watch an ad, AdMob may collect and share IP-based approximate location, advertising and app-set identifiers, device and app information, app and ad interactions, and diagnostic data for advertising, measurement and fraud prevention.

Where the law requires consent (for example in the European Economic Area, the UK and Switzerland), the app asks for it through Google’s consent form when it starts. When Google requires a privacy-options entry point, the game’s settings show a Privacy options button to change your choice. You can also reset or delete your advertising ID in your Android settings. See how Google uses information from apps that use its services.

3. Analytics and crash reports (Android apps)

Firebase Analytics and Firebase Crashlytics are not active in the current Android builds. We plan to add them before closed testing. Analytics would help us understand when a stage or mission starts, is won or lost, how long a round lasts, whether a player comes back the next day, and when an ad is watched. It may process an app-instance identifier, device model, Android version, app version, language and approximate country (from the IP address). Crashlytics would send crash reports and device details. We will update this policy and the Google Play Data safety form to describe the actual collection and retention settings when these services are enabled. See Firebase privacy information.

4. Feedback you send

Each game has a feedback form. Nothing is sent until you press Send. It sends your message, the name and email you choose to enter (both optional), your answers if you fill in the short survey, the game version, your best size and galaxy, your browser or device description (user agent) and up to 12 of the most recent performance-log entries from section 1. It is delivered through Google Forms to our studio account. If submission fails, the game prepares a message in your email app and may copy the report to your clipboard; you must send the email yourself. We use it only to fix problems, improve the games and reply to you. Feedback is retained until you request deletion or we manually remove it; it currently has no automatic expiry.

5. Online play

Online play is optional. Nothing in this section happens until you open the Online window in a game. After you have opened it once, the game also connects to our server while its menus are open, so that a friend’s invite or request can reach you. It never connects during an offline round, and a switch in Online, Account turns this off.

The account. When you open it, the game creates a guest account for you with Firebase Authentication (a Google service): a random account identifier and sign-in tokens, kept in the game’s storage on your device. We do not ask for an email address, a phone number or a password. Signing in with Google is not available yet; we will update this policy before it is.

The online profile. With that account our game server keeps: the name you typed for your planet (checked against a list of offensive words), a friend code, your online Level, XP and coins in each game, the maps you have opened, your friends, friend requests and the players you blocked, reports you send about other players, and for each online match its result and your reward. The server also stores accepted offline XP and synchronization timestamps, and daily counts of matches between the same players to prevent reward farming. While you are connected, the server processes your IP address and keeps technical logs to run the service and protect it. Technical logs are retained until replaced by log rotation; they currently have no fixed retention period.

What other players see. Your name, your Level and what you do in a match. Your friends also see whether you are online or in a match. The current game client has no player chat; preset chat messages are planned.

Where it is kept. The profile is stored in Google Cloud Firestore (Firebase), in the European Union (Paris). The game server runs on Oracle Cloud in France. Data travels over encrypted connections.

How long, and how to delete it. We keep the online profile until you delete it. Open Online, select Account, then choose Delete online account and confirm. Account deletion requires an internet connection; leave any active match on this account before requesting deletion. The online profile is removed when the request succeeds; Firebase Authentication account deletion may be delayed if that service returns an error. The profile, friends list, requests and your own block list are removed when the request succeeds. You can also write to support@flagofgames.com.

After deletion, reward records, daily opponent-pair counts, reports and other players’ block entries may retain your account identifier for fraud prevention and moderation. These retained records contain account identifiers rather than your profile name and currently have no automatic expiry.

A guest account is stored on one device. If you clear the game’s local data or uninstall without first deleting the account, you may lose access to it; an Android backup may restore the app data. You can ask us by email to delete its profile. Include the game name and friend code if known; we may ask for additional information to verify ownership, and an online name alone may not identify the account.

6. The web version

The /play page currently contains only a coming-soon notice; no game runs there. An invite-only test version of the games runs in the browser at /beta for the people we invite: it saves the same progress and settings in your browser’s storage, shows no ads, uses online play as described above, and keeps your invite code in one cookie so that you do not have to enter it again. Versions of our games on other game sites follow those sites’ own privacy policies as well. Apart from that one cookie, our website uses no cookies and no trackers; Cloudflare, which hosts it, processes basic request data (such as IP addresses) to deliver and protect the site.

Tester registrations

We collect your nickname, Google-account email, phone model and Android version, age band, selected games, optional gaming preferences and contact details, availability, consent and any notes you submit. A nickname is enough; a real name is not required. The form requires a phone model and age band to help us cover different devices and player groups; the age band is not a Google Play closed-test requirement.

We use these details to invite you, cover different devices and player groups, coordinate testing and collect feedback. Google Forms processes your answers for us, and we add your Google-account email to the Google Play tester list for the game or games you choose. Joining a WhatsApp group is optional and may make your phone number and profile visible to other members. If you provide no number or account, we contact you by email.

We remove your registration, tester-list entry and corresponding response-sheet records and copies within 30 days of your request or the end of recruitment. To request deletion, write to support@flagofgames.com.

7. Who else processes data

8. Children

Our games are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has sent us personal information (for example through the feedback form), write to support@flagofgames.com and we will delete it.

9. Your choices and rights

• Change your ad consent with Privacy options in the game’s settings when Google requires that button, or reset your advertising ID in Android.
• Ask us to access or delete feedback you sent: write to support@flagofgames.com.
• Delete your online account and its profile in the game (Online, Account, then Delete online account; internet required, after leaving any active match), or write to us.
• Remove the local copy by uninstalling the app or clearing the site’s data; Android system backups may remain and may restore app data after reinstalling.

Depending on where you live (for example under the GDPR), you may have further rights, such as to object or to complain to your data protection authority.

10. Security

Data sent by the games travels over encrypted connections (HTTPS and secure WebSocket). We restrict our administrative access to feedback, the game server and the online-profile database to the studio; the service providers listed above process the data needed to operate their services.

11. Changes

If we add purchases or sign-in with Google, or change what we collect, we will update this page before the change reaches the games, and change the date at the top.