Flumpling Privacy Policy
Effective October 18, 2026.
This policy covers Flumpling accounts, gameplay, sign-in, purchases, optional advertising, optional diagnostics and related support. The features available to you depend on your platform, app version and privacy choices.
About This Policy
Ember Gaming LLC, Illinois, United States, operates Flumpling and is responsible for the personal information described here. Our postal address is 14534 S Abbott Rd E, Homer Glen, IL 60491, United States. Contact support@embergaming.studio for privacy questions or requests. This policy covers Flumpling accounts, gameplay services and related support. Google and other providers also explain their own processing in their privacy notices.
Information We Handle
Account and sign-in information includes your chosen pilot name, game account ID, provider identifiers, any email address supplied through Google or Apple sign-in, and authentication/session information processed through Supabase. Google and Apple authenticate their respective sign-in accounts; Flumpling does not ask for your Google or Apple account password. Where an app-account password is supported, it is separate from those provider passwords. We store a hash of a recovery code rather than the readable code. Legacy test accounts may retain a password verifier until their controlled migration or deletion.
Gameplay information: progress, cosmetic points and items, equipment, favorites, pass progress, trophies, course identifiers, flight inputs, completed runs, results and replay-sharing choices. We use this information to operate cloud saves, validate results, provide rankings and deliver the features you choose. An account and internet connection are required to play.
Purchase information: Google Play handles Android purchases and Apple’s App Store handles iOS purchases. Flumpling processes product and transaction identifiers, purchase-verification records, game-account associations, entitlements, and refund or revocation status to verify purchases and maintain access to purchased features. For Apple purchases, an app account token associates the transaction with your game account. The store handles payment details; Flumpling does not request your full payment-card number.
The game uses Unity’s in-app purchasing SDK, which includes purchase and technical telemetry in addition to the transaction information used by our game server. Optional PostHog settings do not control all store or advertising SDK processing.
Technical and support information: IP addresses and service request information used to operate and protect our services; device/platform and app-version information included in diagnostics; and your email address, messages and attachments when you contact support. Please do not send passwords, recovery codes or full payment-card details.
Your device also stores settings, replay files, account-associated pending submissions and caches. Files you explicitly export or copy, including recovery codes copied to the clipboard, remain under your control and may also be handled by your operating system or other apps.
On iOS, remembered sign-in credentials are stored in an app-scoped Keychain entry configured for use while the device is unlocked and without iCloud synchronization. They maintain account access and are not an authoritative copy of your game balance. Signing out or removing remembered sign-in is different from deleting your cloud game account.
How We Use Information
We use information to authenticate players; maintain accounts and progress; validate gameplay and purchases; provide rankings and replay features; prevent abuse and unauthorized access; handle support and privacy requests; and comply with applicable legal obligations. We do not treat optional advertising as necessary for your game account.
What Other People Can See
Your chosen pilot name and gameplay results can appear in rankings. Replays you choose to share can be accessed by their recipients. Avoid using sensitive personal information in your pilot name. We cannot recall copies that other people have already downloaded or independently shared.
Service Providers And Other Disclosures
Our current service architecture uses Render for hosting, Supabase for database and authentication services, Google and Apple for their sign-in services, and Google Workspace for support email. Google Play processes Android store purchases and Apple’s App Store processes iOS store purchases. Unity supplies the game’s purchasing and LevelPlay advertising SDKs; Google supplies the User Messaging Platform used for advertising privacy choices. PostHog US Cloud provides the optional diagnostics described below. Providers receive the information needed for the services they supply. We may disclose information where required by law or necessary to protect rights, security or users, and in connection with a business transfer subject to applicable protections and notice requirements.
Advertising And Consent Services
Flumpling offers optional rewarded advertising through Unity LevelPlay where supported and available. Advertising availability depends on your platform, account age choice, required privacy choices and the ad service. Unity describes SDK processing of approximate location inferred from network information, device identifiers, ad interactions and technical diagnostics for analytics, advertising and fraud prevention. Its privacy notice is available at https://unity.com/legal/game-player-and-app-user-privacy-policy.
On supported Android and iOS versions, Google’s User Messaging Platform checks advertising privacy requirements and displays a privacy form where required. After sign-in, the app uses one age-group choice for the current pilot, stored on the device. Under our current policy, selecting Under 16 keeps optional advertising and optional PostHog diagnostics off. Selecting 16 or older does not itself grant advertising consent or enable optional diagnostics. Advertising privacy choices and the separate diagnostics choice can be revisited in Settings. On iOS, applicable system tracking choices are separate controls. You do not need to view an advertisement to maintain your game account. Buying an ad-removal feature is not a requirement for making a privacy request.
Optional Diagnostics
Optional diagnostics use PostHog US Cloud and are off for an account unless an eligible player separately opts in. An age choice or advertising-consent result alone does not enable them. The app sends fixed diagnostic categories for operations such as sign-in, saves/recovery, ads and purchases, together with app/build/source information, platform where available, timestamps and rotating random observation identifiers. This fixed-category stream does not include account email or pilot identifiers, purchase tokens, session replay, raw exception text or request/response bodies. PostHog also receives network information needed to receive the events; the stream should not be described as anonymous.
Turning optional diagnostics off stops new collection. Previously collected or already delivered observations may still be processed; turning the option off does not erase information already delivered to PostHog. Diagnostic retention and deletion requests are separate from this setting. Contact support@embergaming.studio for privacy requests.
Retention
We keep account and gameplay information while providing your account, subject to deletion requests and justified legal or security exceptions. Recovery-code hashes remain until invalidated or deleted. Authentication records expire or are revoked according to the applicable session controls.
The current Flumpling service has a seven-day managed daily database-backup window. Deleted data can remain in those backups until expiry. Separately exported recovery copies require manual review; they are not erased by the in-game deletion control. After authentication-provider cleanup, the cleanup record no longer contains raw provider identifiers, but a hashed identifier and completion marker remain to prevent stale credentials from restoring a deleted account. These markers currently have no scheduled expiry and are not active accounts or usable progress.
Deleting a game account does not automatically delete support correspondence or records held independently by Google or payment stores. Include related support messages in a deletion request if you want them reviewed. We will explain pending cleanup or any information retained and the reason when responding. Security logs are retained under our hosting providers' configured retention and as needed to investigate incidents. Support correspondence and separately exported recovery copies do not currently have an automatic deletion schedule. Their retention is reviewed when handling your request, taking account of unresolved support issues, security needs and applicable legal obligations. We do not promise a uniform 30-day deletion period for these records.
Account Deletion And Your Choices
You can request account deletion from the account controls in Pilot Passport. You can also contact support@embergaming.studio with the subject “Flumpling account deletion,” your pilot name or player ID if available, and your request. Do not send a password or recovery code. We verify control of the account before acting; if you cannot sign in, explain that in your request so we can consider an appropriate verification method.
Deletion removes the associated live game account and progress and initiates cleanup of its provider identity records. Provider cleanup can remain pending after game data is deleted; a pending message is not confirmation that all processing has finished. Deleting your Flumpling account does not delete your Google or Apple account, or records independently maintained by those providers and payment stores. Deleting the app alone does not delete your cloud account. Store refund requests are separate from account deletion.
Optional diagnostics already delivered to PostHog are separate from the live game-account database. Turning diagnostics off is not a request to erase those prior observations; contact support for a privacy request.
The public deletion instructions are available at https://embergaming.studio/flumpling-account-deletion.html without a game sign-in. Backup and retained-record exceptions are described above. Do not rely on sign-out to erase device files. You control manually exported files and clipboard copies.
You may also ask us to access, correct or export your information. Depending on your location, you may have rights to deletion, restriction, objection, portability, withdrawal of consent or appeal, and to complain to a data-protection authority. Contact the privacy email above to exercise these rights. We may request proportionate verification and will handle requests under applicable law. Withdrawal of consent does not affect processing already lawfully undertaken.
Children And Teens
Flumpling is not intended for children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and take appropriate action. Additional protections and consent requirements may apply to teenagers depending on their location. This statement does not replace those obligations.
Security And International Processing
We use access controls, authenticated services and encrypted network connections to protect information. No service can guarantee absolute security. Ember Gaming LLC is based in the United States, and the current Flumpling hosting and database services are located in Ohio, United States. Google and other providers may process information in other countries under their own service and privacy terms. Privacy laws in those countries may differ from those where you live. Contact us for information about the providers and protections applicable to your information.
Changes And Contact
We will update the effective date when this policy changes and provide notice of material changes as required by applicable law. Privacy contact: support@embergaming.studio. Operator: Ember Gaming LLC, Illinois, United States.