Flumpling Privacy Policy
Effective [publish date]. Replaces the version effective October 18, 2026.
This policy covers Flumpling accounts, gameplay, sign-in, purchases, optional advertising, optional diagnostics, friends and notifications, and related support. Flumpling is for players of all ages. The features available to you depend on your age, platform, app version and privacy choices.
About This Policy
Ember Gaming LLC, Illinois, United States, operates Flumpling and is responsible for the personal information described here. Our postal address is 14534 S Abbott Rd E, Homer Glen, IL 60491, United States. Contact support@embergaming.studio for privacy questions or requests. This policy covers Flumpling accounts, gameplay services and related support. Google and other providers also explain their own processing in their privacy notices.
Information We Handle
Age information: the birth year entered on the age screen. We store only the year, not a full date of birth, and use it to set up age-appropriate features. In the app the answer can only be changed to a younger age; contact support if it was entered wrongly.
Account and sign-in information includes your chosen pilot name, game account ID, provider identifiers, any email address supplied through Google or Apple sign-in, and authentication/session information processed through Supabase. Google and Apple authenticate their respective sign-in accounts; Flumpling does not ask for your Google or Apple account password. Where an app-account password is supported, it is separate from those provider passwords. We store a hash of a recovery code rather than the readable code. Legacy test accounts may retain a password verifier until their controlled migration or deletion. Where a guest account is offered to players under 13, it has no email address or name attached; it is identified only by a random account ID and the recovery code you keep.
Gameplay information: progress, cosmetic points and items, equipment, favorites, pass progress, trophies, course identifiers, flight inputs, completed runs, results and replay-sharing choices. We use this information to operate cloud saves, validate results, provide rankings and deliver the features you choose. An account and internet connection are required to play.
Friends and notifications (players 13 and over, where available): a friend code, your friends list, friend requests, blocks, challenges and gifts between friends, and, if you turn notifications on, a push-notification token from Google Firebase Cloud Messaging or Apple Push Notification service with your time zone, language and notification switches. Friends features use a shared Ember Gaming player ID so one friends list can work across Ember Gaming games; friends see your pilot name and game results, never your email. Friends messages are fixed texts; there is no chat. These features are not available to players under 13.
Purchase information: Google Play handles Android purchases and Apple’s App Store handles iOS purchases. Flumpling processes product and transaction identifiers, purchase-verification records, game-account associations, entitlements, and refund or revocation status to verify purchases and maintain access to purchased features. For Apple purchases, an app account token associates the transaction with your game account. The store handles payment details; Flumpling does not request your full payment-card number.
The game uses Unity’s in-app purchasing SDK, which includes purchase and technical telemetry in addition to the transaction information used by our game server. Optional PostHog settings do not control all store or advertising SDK processing.
Technical and support information: IP addresses and service request information used to operate and protect our services; device/platform and app-version information included in diagnostics; and your email address, messages and attachments when you contact support. Please do not send passwords, recovery codes or full payment-card details.
Your device also stores settings, replay files, account-associated pending submissions and caches. Files you explicitly export or copy, including recovery codes copied to the clipboard, remain under your control and may also be handled by your operating system or other apps.
On iOS, remembered sign-in credentials are stored in an app-scoped Keychain entry configured for use while the device is unlocked and without iCloud synchronization. They maintain account access and are not an authoritative copy of your game balance. Signing out or removing remembered sign-in is different from deleting your cloud game account.
How We Use Information
We use information to authenticate players; maintain accounts and progress; validate gameplay and purchases; provide rankings and replay features; prevent abuse and unauthorized access; handle support and privacy requests; and comply with applicable legal obligations. We do not treat optional advertising as necessary for your game account.
What Other People Can See
Your chosen pilot name and gameplay results can appear in rankings. Replays you choose to share can be accessed by their recipients. Avoid using sensitive personal information in your pilot name. We cannot recall copies that other people have already downloaded or independently shared.
Service Providers And Other Disclosures
Our current service architecture uses Render for hosting, Supabase for database and authentication services, Google and Apple for their sign-in services, and Google Workspace for support email. Google Play processes Android store purchases and Apple’s App Store processes iOS store purchases. Unity supplies the game’s purchasing and LevelPlay advertising SDKs; Google supplies the User Messaging Platform used for advertising privacy choices. PostHog provides the optional diagnostics and gameplay metrics described below, and Sentry provides optional error reports. For players 13 and over, Cloudflare hosts the friends service, and Google Firebase Cloud Messaging and Apple Push Notification service deliver notifications that a player turns on. Providers receive the information needed for the services they supply. We may disclose information where required by law or necessary to protect rights, security or users, and in connection with a business transfer subject to applicable protections and notice requirements.
Advertising And Consent Services
Flumpling offers optional rewarded advertising through Unity LevelPlay where supported and available. Advertising availability depends on your platform, account age choice, required privacy choices and the ad service. Unity describes SDK processing of approximate location inferred from network information, device identifiers, ad interactions and technical diagnostics for analytics, advertising and fraud prevention. Its privacy notice is available at https://unity.com/legal/game-player-and-app-user-privacy-policy.
On supported Android and iOS versions, Google’s User Messaging Platform checks advertising privacy requirements and displays a privacy form where required. Advertising depends on the age entered. Players under 13 see no ads, and the advertising SDK is not started for them. Players aged 13 to 15 can see optional rewarded ads that are not personalised; we do not ask them for advertising consent or show the iOS tracking prompt. Players 16 and over can see optional rewarded ads; ads are personalised only where you agree in the advertising privacy form or, on iOS, allow tracking. Entering an age does not itself grant advertising consent or enable optional diagnostics. Advertising privacy choices and the separate diagnostics choice can be revisited in Settings. On iOS, applicable system tracking choices are separate controls. You do not need to view an advertisement to maintain your game account. Buying an ad-removal feature is not a requirement for making a privacy request.
Optional Diagnostics
Optional diagnostics are available only to players 16 and over, are off by default, and are never collected from players under 16. They use PostHog for diagnostic and gameplay metrics and, if the separate error-report switch is also turned on, Sentry for error reports. Gameplay metrics are fixed events such as a run starting or ending, with a random install ID, a session ID, mode and timing; PostHog is told not to build a person profile or keep the IP address or location. Error reports contain only the error type and code location (function and file names); messages, user and device details are removed before sending.
Optional diagnostics use PostHog US Cloud and are off for an account unless an eligible player separately opts in. An age choice or advertising-consent result alone does not enable them. The app sends fixed diagnostic categories for operations such as sign-in, saves/recovery, ads and purchases, together with app/build/source information, platform where available, timestamps and rotating random observation identifiers. This fixed-category stream does not include account email or pilot identifiers, purchase tokens, session replay, raw exception text or request/response bodies. PostHog also receives network information needed to receive the events; the stream should not be described as anonymous.
Turning optional diagnostics off stops new collection. Previously collected or already delivered observations may still be processed; turning the option off does not erase information already delivered to PostHog. Diagnostic retention and deletion requests are separate from this setting. Contact support@embergaming.studio for privacy requests.
Retention
We keep account and gameplay information while providing your account, subject to deletion requests and justified legal or security exceptions. Recovery-code hashes remain until invalidated or deleted. Authentication records expire or are revoked according to the applicable session controls.
The current Flumpling service has a seven-day managed daily database-backup window. Deleted data can remain in those backups until expiry. Separately exported recovery copies require manual review; they are not erased by the in-game deletion control. After authentication-provider cleanup, the cleanup record no longer contains raw provider identifiers, but a hashed identifier and completion marker remain to prevent stale credentials from restoring a deleted account. These markers currently have no scheduled expiry and are not active accounts or usable progress.
Deleting a game account does not automatically delete support correspondence or records held independently by Google or payment stores. Include related support messages in a deletion request if you want them reviewed. We will explain pending cleanup or any information retained and the reason when responding. Security logs are retained under our hosting providers' configured retention and as needed to investigate incidents. Support correspondence and separately exported recovery copies do not currently have an automatic deletion schedule. Their retention is reviewed when handling your request, taking account of unresolved support issues, security needs and applicable legal obligations. We do not promise a uniform 30-day deletion period for these records.
Account Deletion And Your Choices
You can request account deletion from the account controls in Pilot Passport. You can also contact support@embergaming.studio with the subject “Flumpling account deletion,” your pilot name or player ID if available, and your request. Do not send a password or recovery code. We verify control of the account before acting; if you cannot sign in, explain that in your request so we can consider an appropriate verification method.
Deletion removes the associated live game account and progress and initiates cleanup of its provider identity records. Provider cleanup can remain pending after game data is deleted; a pending message is not confirmation that all processing has finished. Deleting your Flumpling account does not delete your Google or Apple account, or records independently maintained by those providers and payment stores. Deleting the app alone does not delete your cloud account. Store refund requests are separate from account deletion.
Optional diagnostics already delivered to PostHog are separate from the live game-account database. Turning diagnostics off is not a request to erase those prior observations; contact support for a privacy request.
The public deletion instructions are available at https://embergaming.studio/flumpling-account-deletion.html without a game sign-in. Backup and retained-record exceptions are described above. Do not rely on sign-out to erase device files. You control manually exported files and clipboard copies.
You may also ask us to access, correct or export your information. Depending on your location, you may have rights to deletion, restriction, objection, portability, withdrawal of consent or appeal, and to complain to a data-protection authority. Contact the privacy email above to exercise these rights. We may request proportionate verification and will handle requests under applicable law. Withdrawal of consent does not affect processing already lawfully undertaken.
Children And Teens
Flumpling is for players of all ages. When the app first opens it asks for a birth year, with no answer filled in, before sign-in and before any advertising, analytics or error-report service starts. Until a year is entered, the app treats the player as under 13.
Players under 13. We collect only what is needed to run the game for the child: a random account ID and sign-in session, the birth year, game progress, cosmetics, run results and replays (to check results and show rankings), purchase records, and the network information (such as IP address) our hosting providers need to deliver and protect the service. We use this information only to operate the game, keep it secure and meet legal obligations. For players under 13 we do not: show ads or start the advertising SDK; read or send advertising identifiers or show the iOS tracking prompt; collect analytics, gameplay metrics or error reports; collect an email address, real name, contact list, photos or location; offer friends, challenges, gifts, notifications, replay sharing or email news; or let them type a public name (they pick from a list of generated names). Purchases, the subscription offer and links that leave the game are behind a parent check. We do not sell children's information or use it for targeted advertising, and we share it only with the service providers listed above that run the game for us. If we ever want to collect more from a child, we will first ask a parent for verifiable consent.
Players aged 13 to 15. Ads are not personalised, there is no tracking prompt, and optional diagnostics stay off. Friends and notifications are available, with notifications off until turned on. Players 16 and over can choose the optional features described above; all of them are off by default.
Parents' rights. A parent or guardian can ask us to review the personal information we hold about their child, to correct it, to delete it and the child's account, and to stop any further collection or use. Email support@embergaming.studio with the subject “Flumpling parent request” and the child's pilot name or player ID if you have it. We will take reasonable steps to confirm that you are the child's parent or guardian and that the account is your child's before acting. Deletion follows the Account Deletion section above, including the seven-day backup window. The account can also be deleted in the game from Pilot Passport.
If a child entered an older age. If you believe a child under 13 is using Flumpling with an older age, or has given us personal information we should not have, contact us. We will move the account to the under-13 settings or delete the information, as you prefer.
Operator for children's privacy questions: Ember Gaming LLC, 14534 S Abbott Rd E, Homer Glen, IL 60491, United States, support@embergaming.studio. Additional protections and consent requirements may apply to teenagers depending on their location, and we apply them as described above.
Security And International Processing
We use access controls, authenticated services and encrypted network connections to protect information. No service can guarantee absolute security. Ember Gaming LLC is based in the United States, and the current Flumpling hosting and database services are located in Ohio, United States. Google and other providers may process information in other countries under their own service and privacy terms. Privacy laws in those countries may differ from those where you live. Contact us for information about the providers and protections applicable to your information.
Changes And Contact
We will update the effective date when this policy changes and provide notice of material changes as required by applicable law. Privacy contact: support@embergaming.studio. Operator: Ember Gaming LLC, Illinois, United States.