Privacy Policy for Flappy Dragon

Last updated: 19 August 2026

This Privacy Policy explains how personal data is processed when you use the Android application Flappy Dragon.

1. Data Controller

The controller responsible for the processing described in this Privacy Policy is:

RealityForge GbR
Biberacherweg 3
12247 Berlin
Germany
Email: realityforgeeu@gmail.com
Website: www.realityforge.eu

2. Overview

Flappy Dragon is a free, advertising-supported mobile game.

You can use the app without creating an account. RealityForge does not ask you to provide your name, email address, telephone number, payment details or other directly identifying information.

The app uses:

• Google AdMob to display banner advertisements;
• Google User Messaging Platform (UMP) to manage privacy choices;
• Google Analytics for Firebase to measure app usage and gameplay interactions.

The app does not currently use:

• user accounts;
• cloud-based save games;
• online leaderboards;
• in-app purchases or subscriptions;
• Firebase Crashlytics;
• a backend server operated by RealityForge.

Google and participating advertising technology providers may process personal data when advertisements are requested or displayed.

Where analytics collection is enabled, Google Analytics for Firebase processes app usage, device, advertising and gameplay interaction data as described below.

3. Local Storage

Flappy Dragon stores your highscore locally on your device.

The app does not synchronise your locally stored highscore with a user account or cloud save.

RealityForge cannot directly access the highscore file stored on your device.

The locally stored highscore normally remains stored until:

• you delete the app data through the Android settings;
• you uninstall the app;
• the data is otherwise deleted by the operating system.

When analytics collection is enabled, the app may also store a limited analytics state locally on your device. This may include:

• an attempt counter;
• whether the first successful obstacle passage has already been reported.

This information is used to support analytics measurement and to avoid reporting certain events more than intended.

This local analytics state normally remains until:

• it is replaced or reset by the app;
• you clear the app's storage;
• you uninstall the app;
• the data is otherwise deleted by the operating system.

The highscore storage is necessary to provide the highscore feature requested by the user.

Where laws implementing Article 5(3) of the ePrivacy Directive apply, storage that is strictly necessary to provide this requested functionality is carried out on that basis.

Local storage used exclusively for analytics is used only when the app's current privacy state permits analytics collection.

4. Google AdMob

Flappy Dragon uses Google AdMob, a mobile advertising service.

For users in the European Economic Area, the relevant Google entity is generally:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

The Google Mobile Ads SDK may collect or receive information including:

• your IP address, which may be used to estimate your approximate location;
• device and operating-system information;
• app and device identifiers, including the Android Advertising ID and App Set ID where available;
• app launches and interactions;
• information about advertisements requested or displayed;
• advertisement impressions, clicks and other interactions;
• diagnostic and performance information;
• information used to detect fraud, abuse and invalid advertising activity;
• privacy and consent signals.

The exact data processed depends on factors including:

• your device settings;
• your privacy choices;
• the advertising mode used;
• your location;
• the advertising technology providers involved in delivering an advertisement.

Data transmitted by the Google Mobile Ads SDK is encrypted in transit.

5. Purposes of Advertising Processing

Data processed in connection with Google AdMob may be used for purposes including:

• displaying advertisements;
• selecting advertisements using contextual or other permitted information;
• displaying personalised advertisements where permitted;
• measuring advertisement performance;
• counting advertisement impressions and interactions;
• limiting how often an advertisement is shown;
• producing advertising and revenue reports;
• maintaining the security and technical operation of the advertising service;
• detecting fraud, abuse and invalid traffic;
• complying with legal obligations.

Depending on your location and privacy choices, Google may provide:

• personalised advertisements;
• non-personalised advertisements;
• contextual advertisements;
• limited advertisements.

RealityForge receives advertising and revenue information through AdMob and related Google reporting systems.

6. Google Analytics for Firebase

Flappy Dragon uses Google Analytics for Firebase to understand how the game is used and how players interact with it.

For users in the European Economic Area, the relevant Google entity is generally:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics for Firebase may automatically process information including:

• an app-instance identifier assigned to the installation;
• the Android Advertising ID where available and permitted;
• masked IP-address information from which approximate geographic information may be derived;
• device manufacturer and model;
• operating-system information;
• app version;
• language and general device settings;
• app launches;
• sessions;
• session duration and engagement;
• app lifecycle events;
• technical and diagnostic information.

Google Analytics for Firebase also automatically records certain events and properties provided by the Analytics SDK.

Flappy Dragon additionally sends custom gameplay events when analytics collection is enabled.

These include events relating to:

• starting a run;
• passing the first obstacle gap;
• ending a run;
• the score achieved;
• whether the score was a new personal best;
• the duration of the run;
• the reason the run ended, such as hitting an obstacle, the floor or the ceiling;
• restarting after a failed run;
• the time between a failed run and the next restart;
• the sequential number of runs or attempts used for gameplay analysis.

These gameplay events do not include:

• your name;
• your email address;
• your telephone number;
• payment information;
• account login information;
• free-text messages entered by you.

RealityForge uses this information to understand aggregated and pseudonymous usage patterns rather than to identify individual players by name.

7. Purposes of Analytics Processing

Google Analytics for Firebase is used for purposes including:

• measuring active users and app sessions;
• measuring user engagement;
• evaluating player retention;
• understanding how frequently players restart the game;
• measuring the time between failure and restart;
• determining whether the game mechanic is understandable;
• evaluating game difficulty;
• analysing score distributions;
• identifying common causes of failed runs;
• improving gameplay balancing;
• improving the restart loop and general user experience;
• understanding how gameplay engagement relates to advertising revenue;
• identifying analytics or implementation problems.

Analytics events that occurred while analytics collection was disabled are not intentionally stored by RealityForge for later retroactive transmission.

8. AdMob and Firebase Integration

The AdMob app used by Flappy Dragon is linked with the Firebase project used for Google Analytics.

This integration allows advertising information to be included in Analytics and Firebase reporting.

When the app is linked with AdMob, advertising events such as:

• advertisement impressions;
• advertisement clicks;
• advertisement exposure;

may be represented in Google Analytics reporting.

RealityForge has also enabled impression-level ad revenue in AdMob.

This means information about the revenue associated with individual advertising impressions may be made available to Google Analytics and related Google reporting systems.

Depending on the reporting context, this may allow advertising revenue to be analysed together with pseudonymous app-usage and gameplay information.

RealityForge uses this information to evaluate:

• advertising performance;
• app monetisation;
• player retention;
• the relationship between gameplay engagement and advertising revenue.

RealityForge does not use this information to determine the civil identity of individual players.

9. Consent and Privacy Management

Flappy Dragon uses Google User Messaging Platform (UMP) to obtain and manage privacy choices where required.

For users in the:

• European Economic Area;
• United Kingdom;
• Switzerland;

Google UMP may display a European privacy and consent message.

Depending on the options provided by Google and the user's location, users may be able to:

• consent to or refuse certain advertising purposes;
• consent to or refuse personalised advertising;
• manage advertising purposes and advertising technology providers;
• change or withdraw previous choices.

Analytics collection is disabled by default when the app starts.

After the current UMP privacy status has been obtained, analytics collection is enabled only when the app's privacy and consent logic determines that the current status permits collection.

Where UMP determines that consent is required, analytics remains disabled unless the applicable privacy state permits analytics collection.

Where UMP determines that a consent message is not required for a particular user, analytics collection may be enabled without displaying a consent form.

The app does not intentionally transmit previously queued gameplay analytics events retroactively after analytics becomes enabled.

Where Google UMP determines that a privacy-options entry point is required, Flappy Dragon provides a "Privacy settings" option on the start or game-over screen.

Through this option, users can review or change privacy choices made available by Google UMP.

Withdrawing a consent choice does not affect the lawfulness of processing that occurred before the withdrawal.

Refusing or withdrawing consent does not prevent you from playing Flappy Dragon.

10. Legal Bases for Processing in the EEA

Where the GDPR applies, RealityForge relies on different legal bases depending on the processing concerned.

Consent

Article 6(1)(a) GDPR may apply where consent is required for:

• personalised advertising;
• advertising measurement;
• analytics;
• storage or access to information on a user's device;
• other purposes presented through the Google consent interface.

Consent may also be required under national laws implementing Article 5(3) of the ePrivacy Directive.

Performance of the Requested Service

Article 6(1)(b) GDPR may apply where processing is necessary to provide functionality requested by the user, including:

• operating the game;

operating the game;

• processing game input;
• storing the local highscore.

Legitimate Interests

Article 6(1)(f) GDPR may apply to limited processing necessary for purposes including:

• maintaining app security and stability;
• detecting fraud or abuse;
• preventing invalid advertising activity;
• resolving technical problems;
• protecting legal claims;
• producing aggregated business and revenue information;
• measuring basic app performance where consent is not legally required.

RealityForge's relevant legitimate interests include:

• securely operating the app;
• improving the app;
• financing the app through advertising;
• detecting fraud and invalid traffic;
• protecting RealityForge's legal and commercial interests.

Where consent is legally required, RealityForge does not rely on legitimate interests as a substitute for that consent.

Google and other companies acting as independent controllers may determine their own legal bases for processing for which they are responsible.

11. Privacy Rights in US States

Users in certain US states may have privacy rights under applicable state law.

Google UMP supports privacy messages for US states for which Google provides this functionality.

Where applicable, users can access the privacy-options entry point in Flappy Dragon and may be offered choices relating to:

• the sale of personal information;
• the sharing of personal information;
• targeted or personalised advertising.

RealityForge does not sell personal information to third parties for monetary payment.

However, privacy laws in some US states use broader definitions of terms such as "sale", "sharing" or "targeted advertising".

As a result, disclosures of identifiers or other information to advertising providers for personalised or targeted advertising may qualify as sale, sharing or targeted advertising under applicable state law even where RealityForge does not receive direct payment for the data itself.

Where applicable, users may use the Google UMP privacy options provided in the app to communicate an opt-out choice.

Additional rights under applicable US state privacy laws may include rights to:

• request access to personal information;
• request deletion;
• request correction;
• obtain information about categories of data processed or disclosed;
• opt out of certain advertising-related processing.

These rights apply only to the extent that the relevant law applies to RealityForge and the processing concerned.

12. Google and Other Advertising Providers

Google Analytics for Firebase generally processes analytics data under the applicable Google data-processing terms.

Google may also process certain information for its own purposes where permitted by its terms, enabled settings or applicable law.

For advertising-related processing, RealityForge, Google and participating advertising technology providers may each act as independent controllers for parts of the processing for which they determine their own purposes and means.

Google determines many aspects of the technical operation of its advertising systems, including:

• advertisement delivery;
• advertising measurement;
• fraud and abuse prevention;
• technical operation of the Google Mobile Ads SDK;

technical operation of the Google Mobile Ads SDK;

• participation of advertising technology providers.

The advertising technology providers that may receive data are disclosed through the Google consent interface where applicable.

The providers available through Google's advertising systems may change over time.

Further information about Google's processing can be found in Google's:

• Privacy Policy;
• information on how Google uses information from apps that use Google services;
• Google Analytics and Firebase documentation;
• advertising privacy documentation;
• Ads Data Processing Terms;
• applicable controller-to-controller data protection terms.

13. Recipients of Personal Data

Depending on the relevant processing, personal data may be received by:

• Google Ireland Limited;
• Google LLC and other Google group companies;
• advertising technology providers participating in advertisement delivery;
• technical, security and infrastructure providers used by Google or advertising providers;
• public authorities where disclosure is legally required.

RealityForge may access pseudonymous analytics data, advertising information and revenue reports through:

• Firebase;
• Google Analytics;
• Google AdMob.

RealityForge does not operate a database containing player names or user accounts for Flappy Dragon.

14. International Data Transfers

Google and participating advertising technology providers may process data outside the European Economic Area, including in the United States and other countries in which they or their service providers operate.

Where personal data subject to the GDPR is transferred to a country without an applicable European Commission adequacy decision, the relevant provider may rely on safeguards including:

• Standard Contractual Clauses approved by the European Commission;
• an applicable adequacy decision;
• participation in an officially recognised data-transfer framework;
• another mechanism permitted under Chapter V GDPR.

Data-protection laws and government access rights outside the European Economic Area may differ from those applicable within the European Economic Area.

Information about Google's international data-transfer safeguards is available through Google's privacy and data-processing documentation.

15. Data Retention and Deletion

RealityForge does not maintain a user-account database for Flappy Dragon.

Local Game Data

Your locally stored highscore normally remains on your device until:

• you clear the app's storage;
• you uninstall the app;
• the operating system otherwise deletes the data.

Local Analytics State

The limited analytics state stored by the app normally remains until:

• it is reset or replaced by the app;
• you clear the app's storage;
• you uninstall the app;
• the operating system otherwise deletes the data.

Privacy Choices

Privacy and consent information managed through Google UMP may remain stored until:

• you change or withdraw your choice;
• the privacy information expires;
• Google requires the choice to be renewed;
• you clear the app's data;
• you uninstall the app.

Google Analytics

The Google Analytics property used for Flappy Dragon is configured to retain applicable user-level and event-level Analytics data for no longer than 14 months.

Some aggregated reports are not affected by the same user-level retention setting and may remain available for longer.

Advertising Data

Advertising data processed by Google and participating advertising technology providers is retained according to their respective:

• purposes;
• retention policies;
• contractual obligations;
• legal requirements.

RealityForge may retain aggregated advertising, financial and revenue reports for:

• accounting;
• tax obligations;
• business analysis;
• legal compliance.

16. Your Data Protection Rights

Depending on the law applicable to you, you may have rights relating to your personal data.

Under the GDPR, these may include:

• the right to information about processing;
• the right of access under Article 15 GDPR;
• the right to rectification under Article 16 GDPR;
• the right to erasure under Article 17 GDPR;
• the right to restriction of processing under Article 18 GDPR;
• the right to data portability under Article 20 GDPR;
• the right to object under Article 21 GDPR;
• the right to withdraw consent under Article 7(3) GDPR;
• the right to lodge a complaint with a supervisory authority.

You may contact RealityForge using the contact details provided in Section 1.

Because Flappy Dragon does not use accounts, RealityForge does not normally know the civil identity of an individual player.

Google Analytics for Firebase associates analytics information with pseudonymous technical identifiers such as an app-instance identifier.

Where a request requires RealityForge to locate data associated with a particular app installation, RealityForge may require sufficient technical information to determine whether the relevant data can reasonably be identified.

Where RealityForge cannot identify data as relating to the requesting individual, some rights may not be technically exercisable without additional identifying information.

Where Google or another advertising technology provider acts as an independent controller, you may also exercise applicable rights directly against that provider.

17. Right to Object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing for reasons arising from your particular situation.

Where personal data is processed for direct marketing purposes, you have the right to object to that processing at any time where applicable.

18. Right to Lodge a Complaint

Where the GDPR applies, you have the right to lodge a complaint with a data protection supervisory authority.

You may in particular contact the supervisory authority in the country or region in which you:

• live;
• work;
• believe an infringement has occurred.

The supervisory authority responsible for RealityForge is generally the competent data protection supervisory authority for Berlin, Germany.

19. Children and Teenagers

Flappy Dragon is intended for users aged 13 and older and is not specifically directed at children under the age of 13.

The app does not ask users to provide:

• their name;
• their contact details;
• their date of birth;
• their age.

The ability of a person under 18 to consent to particular forms of data processing varies between countries and legal systems.

If applicable law requires consent or authorisation from a parent or legal guardian for a user's age, consent-based processing should only take place in accordance with those requirements.

RealityForge does not knowingly request directly identifying personal information from children under the age of 13 through Flappy Dragon.

20. Automated Advertising Decisions

RealityForge does not use automated processing to make decisions that produce legal effects concerning a player or similarly significantly affect that player.

Where personalised advertising is permitted, Google or participating advertising technology providers may use automated systems to select advertisements based on advertising signals, predicted interests or related information.

This form of advertisement selection does not normally produce legal effects concerning a player or similarly significantly affect that player.

21. Security

RealityForge takes reasonable technical and organisational measures appropriate to the nature of Flappy Dragon and the processing involved.

In particular:

• analytics collection is disabled by default until the app has received and evaluated the current privacy state;
• personal data transmitted through the Google Mobile Ads SDK and Google Analytics for Firebase is encrypted in transit;
• Flappy Dragon does not operate a RealityForge user-account database;
• the locally stored highscore is not uploaded to a RealityForge backend.

No method of electronic transmission or storage can guarantee absolute security.

22. Changes to This Privacy Policy

RealityForge may update this Privacy Policy when:

• the app's functionality changes;
• additional SDKs or services are introduced;
• analytics events change;
• advertising practices change;
• privacy-management functionality changes;
• legal or regulatory requirements change.

The current version will be made available through the privacy-policy page linked from:

• the Google Play Store listing;
• Flappy Dragon itself.

The date at the beginning of this Privacy Policy indicates when it was last updated.