Privacy policy
Last updated: October 13, 2026
Thanks for playing Flappy Spikes. This page explains, in plain language, what information the game collects, why it collects it, who helps us process it, and what it never does. Flappy Spikes is made by Duo Leads. If anything here is unclear, write to us at [email protected] and we will do our best to answer.
The short version
Flappy Spikes is a small arcade game. It keeps your progress on your device, sends gameplay statistics to Google Firebase Analytics, and shows ads through Google AdMob (with Unity Ads as a second ad network). Ads use your device's advertising ID; in the EU and UK you are asked for consent first. If you play versus races, an entry for your runs is stored on our Firebase server so other players can race it. If you sign in to Google Play Games, your best score goes to its public leaderboard. There are no accounts with a password, and nothing is sold. The NO ADS purchase removes the banner and the ads after runs.
What the game collects
On your device. Your best score, coins, skins, levels, settings and other progress are stored locally on your phone. This data stays on your device until you delete the app.
Gameplay statistics. The game uses Google Firebase Analytics to understand how the game is played: for example when a run starts and ends, the score you reached, which power-ups you used, and when an ad was shown. Firebase also records technical details like your device model, operating system version, app version, an app instance identifier and an approximate country or city derived from your IP address. Where the law allows it and you have not opted out, analytics can also use your advertising ID. We use it only to see how the game is played and where it can be improved.
Ads. Flappy Spikes shows a banner ad during runs, a video ad after some runs, and optional rewarded ads that you choose to watch (for example for free coins or a revive). The ads come from Google AdMob, which also fills ads through Unity Ads (mediation). To show and measure ads, AdMob and Unity collect your device's advertising ID, your IP address, device and app information, and how you interact with the ads. With your consent the ads can be personalised. In the EU, the EEA, the UK and Switzerland the game shows Google's consent message before any ad is requested; you can change your choice at any time in Settings → Privacy options. You can also reset or delete your advertising ID, or opt out of personalised ads, in your phone's settings. Buying NO ADS removes the banner and the ads after runs; rewarded ads stay available if you want them.
Purchases. Coin packs and NO ADS are sold through Google Play. Google Play handles the payment; the game never sees your card or payment details. It only receives the purchase confirmation so it can give you what you bought, and it can restore NO ADS on a new phone (Settings → Restore purchases). Gift codes are redeemed in the Play Store in the same way.
Leaderboards. If you sign in to Google Play Games (on Android) or Game Center (on iPhone, when the iPhone version is out), the game submits your best score to the public leaderboard under the name you chose for that service. Signing in is optional and handled entirely by Google or Apple. The game never sees your password.
Versus. Versus races are against other players' recorded runs. To make that work, the game signs in to Firebase with an anonymous account (a random id, no email, phone number or password) and uploads an entry for some of your runs: a nickname, the items your bird is wearing, your score, best score and level, the platform, the time, and a replay of the run. The nickname is generated by the game, or, if you link Google Play Games, it is your Play Games display name, and your Play Games profile picture is shown to other players in Versus (a small 96 × 96 copy is stored with your entry). Runs also carry a one-way hashed form of your Play Games player id, so you are never matched against your own older runs. The game reads other players' entries to find you an opponent. This data is stored in Google Firebase in the EU and is used only for the race.
Security. Firebase App Check (with Google Play Integrity) checks that requests come from the real app, so the versus server is not abused. It does not collect personal information.
Reminders. If you allow notifications, the game schedules local reminders on your phone. They are created and kept on the device; nothing is sent to a server.
What the game does not do
No account registration with a password. No email addresses, contacts, photos from your phone, or precise locations collected. No free text: nicknames come from a fixed word list. No data sold. No notifications sent from a server.
Third party services
The game relies on these services, each with its own privacy policy:
- Google Firebase: Analytics, Authentication, Cloud Firestore, Cloud Functions, Cloud Storage and App Check (statistics and the versus server)
- Google AdMob: ads, and Google's consent message
- Unity Ads: ads, through AdMob mediation
- Google Play Games: sign-in and leaderboards on Android
- Google Play billing: purchases
- Apple Game Center: leaderboards on iPhone, once the iPhone version is out
Your rights (GDPR)
The controller of your data is Duo Leads, [email protected]. We process data on these legal bases:
- Consent for personalised ads (you can withdraw it at any time in Settings → Privacy options);
- Legitimate interest for gameplay statistics, non-personalised ads, versus races and keeping the game secure;
- The contract with you for purchases: delivering and restoring what you bought.
You have the right to access your data, to have it corrected or deleted, to object to its processing, and to withdraw your consent. Write to us and we will answer within 30 days. If you think we handle your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live.
Google and Unity can process data in the United States. Those transfers are covered by their standard contractual clauses and the EU–US Data Privacy Framework.
Keeping and deleting your data
- Local data (progress and settings) stays on your device until you delete the app.
- Versus data is deleted automatically about 60 days after your last run.
- Analytics data is kept as long as Google Analytics retains it.
- Ad data is kept by Google and Unity under their own policies.
- Leaderboard scores stay on Google Play Games or Game Center until you remove them there.
- Purchase records are kept by Google Play, as the law requires.
You can delete your versus data and account right away from Settings → Delete my data, or by email if you no longer have the app. Everything about deleting is on the delete your data page.
Children
Flappy Spikes is a general audience game, but it is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has submitted information through the game, please contact us and we will remove it.
Changes to this policy
If the game changes in a way that affects your privacy, this page will be updated before the change goes live, and the date at the top will show when that happened.
Contact
Questions, deletion requests, or anything else about privacy: Duo Leads, [email protected]. Help with the game itself is on the support page.