Privacy Policy

Last updated: 13 October 2026

You can play our browser games without an account and without giving us anything. If you create an account, we keep your email address and your game progress, so that you can carry on from any device. That is all we use them for. If you choose to join a game's hall of fame, the name you pick, your country and your scores are shown to everyone. The site and the games show ads, and we use Google Analytics to see how they are used. Where the law requires it, we ask you before anything is stored on or read from your device for these, and you can change your answer at any time.

Who we are

FlexyGames is operated by Carian Ltd, 1004-(DM-08-0449), Aljiyad Business Center, Fahidi Heights, Al Hamriya, Dubai, United Arab Emirates (“we”, “us”). We run flexygames.com and the browser games on it, and are responsible for the personal data described here. This policy covers that site and those games; it does not cover our Android apps. For anything about this policy or your data, write to support@flexygames.com.

If you just play

• No account is needed. Your progress (levels, stars, credits, research, settings and any game left part-way through) is saved in your browser's storage on your own device. It is not sent to us.
• Server logs. Like every website, the servers that deliver ours receive your IP address and details of your browser with each request, and may record them in logs used to keep the site running and secure.
• Ads. The games show ads: a banner on the level select and, now and then between levels, a full-screen ad you can close at once. Our web pages may show ads from Google AdSense. See Ads below.
• Analytics. Google Analytics counts visits to our pages and, in the games, when a level is started and how it ends: which level, what kind of game, and whether it was won. See Analytics below.

If you create an account

An account is optional. With one, we store:

• Your email address, to recognise your account when you sign in through Google.
• What Google tells us when you sign in: your email address, your name, the address of your profile picture and an identifier for your Google account. We use the email address to recognise your account. We do not use the name or picture, and we never see your Google password.
• Your game progress, the same progress that is otherwise kept on your device, so that it follows you to other devices.
• Sign-in records: when the account was created, when you last signed in, and the IP address and browser used. These help keep accounts secure.

We use this information only to provide accounts and saved progress and to keep the service secure. We do not sell it, and we do not use it for advertising.

Where European data protection law applies, we rely on our agreement with you to provide the account you asked for, and on our legitimate interest in keeping the service secure.

If you join a hall of fame

Some games have a hall of fame, a public list of the best players. You are not on it unless you join, which takes an account. If you join, we store and show to everyone who opens it:

• The name you choose. It does not have to be your real name, and we suggest that it is not.
• The country you choose. The game suggests one from your browser's language; we do not work it out from your location.
• Your scores in that game, such as the stars you have earned and your longest endless run.

So that scores cannot be made up, each one is checked before it counts. For that the game sends us the record of the game it was earned in: the level, the research in play and the moves you made, such as where and when each tower was built. We play the game out again from that record and keep, with your account, the best score it gives on each level. A record waits on your device until you join; nothing is sent for players who have not.

Your email address is never shown, and other players cannot tell which account an entry belongs to. You can change the name and country, or leave, at any time on the game's hall of fame screen; leaving removes the entry at once, and so does deleting your account.

Ads

The ads in the games are chosen in an online auction run by Xandr, Microsoft's advertising exchange, each time one is shown. For that, your browser sends Xandr, and through it the advertisers taking part, your IP address, details of your device and browser, the page and the size of the space. The game sends nothing about your account, your progress or your scores.

Before anything is stored on or read from your device for advertising, a consent banner (FlexyConsent) asks you. With your consent, Xandr and the advertisers may use cookies and similar identifiers to choose ads that suit your interests, to limit how often you see the same ad and to measure them. Without it you still see ads, but they are not chosen with information stored on your device. You can change your choices at any time with “Privacy choices” in the game's Account menu, or the “Privacy choices” link at the bottom of our web pages.

Our web pages may show ads served by Google AdSense.

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
• You may opt out of personalised advertising by visiting Google's My Ad Center / Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalised advertising by visiting www.aboutads.info/choices or, in Europe, www.youronlinechoices.eu.
• Learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, and read Google's privacy policy at policies.google.com/privacy.
• In the European Economic Area, the United Kingdom and Switzerland, ads are personalised only if you consent. If you do not, you may still see non-personalised ads, which can still use cookies for frequency capping, aggregated reporting and fraud prevention where permitted.

Where European data protection law applies, advertising uses your data on the grounds you agree to in the consent banner, under the IAB Transparency and Consent Framework; some advertisers rely on their legitimate interest for some purposes, which you can object to there. Xandr, Google and the advertisers handle the data under their own privacy policies.

Analytics

We use Google Analytics to understand how our pages and games are used and to improve them. It records the pages visited and, in the games, when a level is started and how it ends (which level, what kind of game, the difficulty, and whether it was won), together with the usual details Google Analytics collects, such as your browser, device and approximate region. Nothing about your account, your progress or your hall-of-fame entry is sent to it. Where consent is required, Google Analytics stores cookies only after you accept in the consent banner; until then it may send cookieless signals as part of Google Consent Mode. You can also install Google's opt-out browser add-on.

What is stored on your device

The games keep your game progress and settings in your browser's local storage and, if you sign in, the token that keeps you signed in. The consent banner stores your choices about ads, so that it does not ask again. With your consent, Xandr, Google and advertisers may also store cookies or similar identifiers for the purposes you agreed to, and Google Analytics its own cookies; the consent banner lists them. Clearing your browser's data for this site removes what the games and the banner stored; if you are not signed in, that also removes your progress.

Who handles data for us

• Supabase stores accounts, saved progress and hall-of-fame entries for us, on servers in Frankfurt, Germany.
• Our hosting provider delivers the website and the games.
• Google, only if you choose “Continue with Google”. Google then knows that you signed in to FlexyGames, and provides its sign-in service under its own terms and privacy policy.
• Xandr (Microsoft) runs the auctions for the ads, and passes the data described under Ads to the advertisers taking part.
• Google serves ads on our web pages through Google AdSense, and provides Google Analytics, as described under Ads and Analytics.
• FlexyConsent provides the consent banner and keeps a record of the choices made in it.

Supabase and the hosting provider work on our behalf.

Accounts, saved progress and hall-of-fame entries are stored in Germany. We run FlexyGames from the United Arab Emirates, and some of the companies above are based in the United States, so personal data may be accessed from, or transferred to, those countries. Where that happens it is protected by safeguards such as the European Commission's standard contractual clauses, and we handle it only as this policy describes.

How long we keep it

Account details and saved progress are kept for as long as you have the account. If you delete the account in the game they are deleted at once; if you ask us by email, within 30 days. A hall-of-fame entry is kept until you leave the hall of fame or delete the account; the checked scores behind it are kept until you delete the account. Server logs are kept no longer than is needed for security and troubleshooting. Google Analytics keeps what it records for the retention period set in our account, at most 14 months.

Your choices and rights

• Play without an account.
• Sign out at any time from the Account menu on the level select. Your progress stays in your account, and that device starts again from the beginning; if your account cannot be reached at that moment, the progress stays on the device instead.
• Change what you agreed to about ads and analytics at any time with “Privacy choices” in the game's Account menu, or the “Privacy choices” link at the bottom of our web pages.
• Stay out of the hall of fame, or leave it or change the name shown there, on the game's hall of fame screen.
• Delete your account and everything stored with it: use “Delete account” in the Account menu on the game's level select while you are signed in, or email support@flexygames.com from the account's address.

Depending on where you live, you may also have the right to see the data we hold about you, to have it corrected or deleted, to receive a copy of it, to object to or restrict how we use it, and to complain to your data protection authority. Email us to use any of these rights.

Children

The games can be played without giving us any personal information. Accounts are not meant for children under 13, or under the age at which your country lets you agree to such services yourself. If you believe a child has created an account, tell us and we will delete it.

Security

Connections to the site are encrypted, and each account can read and change only its own saved progress and change only its own hall-of-fame entry. No system is perfectly secure, so we cannot promise absolute security.

Changes to this policy

If we change this policy we will post the new version here and change the date at the top.

Contact

Carian Ltd
1004-(DM-08-0449), Aljiyad Business Center, Fahidi Heights, Al Hamriya, Dubai, United Arab Emirates
support@flexygames.com