Flickard

Privacy Policy

Last updated 17 August 2026

This notice explains how Flickard processes personal data when you create an account, play, share a map, or write to us. Flickard is the controller. Contact us through the form at /contact.

Providing an email and password is required only if you want an account. Guests can play casual and practice modes without one.

What we process

We process the following categories of data:

  • Account: username, email, password hash (we never store the raw password).
  • Play: ELO, rank, wins and losses, career stats, equipped cosmetics, Tickets and TicketPass progress.
  • Maps you save or publish, including the stadium JSON and the owner username.
  • Contact messages: email, category, text, optional URL, and a hashed IP.
  • Technical data needed to run the service: refresh cookie, access token in local storage, language preference, audio and control settings.

Why and on what legal basis

Account, match history, maps, and Tickets are processed to perform the game contract you ask for when you register (GDPR Art. 6(1)(b)).

Security, abuse handling, and hashed IPs on contact messages are processed for our legitimate interest in keeping the pitch usable (Art. 6(1)(f)).

Language and control settings are stored because you chose them.

Who sees the data

Public profiles, leaderboards, published maps, and clips are visible to anyone who opens those pages.

Hosting and database providers that run the site process data on our instructions. We do not sell personal data and we do not run advertising or analytics trackers.

How long we keep it

Account and career data stay until you ask us to delete the account, or until we close an account for a serious rule break.

Contact messages are kept so we can answer and, where the law requires, record the decision. Hashed IPs are not used to identify you in public.

Session cookies last 7 days. The language cookie lasts 1 year or until you change language.

Your rights

You may request access, correction, deletion, restriction, or a copy of your data, and you may object to processing based on legitimate interest. Use the contact form (category: privacy request).

You may lodge a complaint with your local supervisory authority. In the EU that is your national data protection authority.