Privacy Policy — Face Off

The short version. Face Off stores a display name, an avatar, a six-digit friend code, your country, and your game results. It has no access to your camera, microphone, photos, contacts or location. It shows ads unless you subscribe. You can delete everything from inside the app.

1. Who we are

Face Off is a mobile game for iOS and Android. In this policy, "we" means the developer of Face Off, and "the app" means the Face Off mobile application. If you want to reach us about anything here, use the support form.

2. What we collect

When you sign in

You sign in with an email address, or with Google, Apple or Discord. We never see your password. From your chosen provider we receive an account identifier, and where the provider supplies them, a display name and an avatar image URL. Some providers also supply an email address; Discord and X may not, and the app works without one.

Your profile

Display name and avatar.
A six-digit friend code, generated by us, so other players can add you.
Your country, determined from your device's language and region settings — used for regional leaderboards. We do not use GPS, and we do not collect your location.

How you play

Match results: which game, the scores, who won, and when.
Totals derived from those results: matches played, win rate, win streak.
Your friends, friend requests, and anyone you have blocked.
Reports you submit about another player, including the reason you chose.
A "last seen" timestamp, so the app can show roughly how many players are online.

Purchases

Subscriptions are processed by Apple or Google, not by us. We never receive your card details. We store whether your account is currently subscribed, which product, and when it renews or expires — supplied to us by RevenueCat, our subscription provider.

Referrals

If you enter someone's invite code, we record that they invited you, so their reward can be credited. That link is visible to you and to them, and to nobody else.

Diagnostics and ads

Crash reports via Firebase Crashlytics, so we can fix what breaks. These include device model, operating system version, and where in the app the crash happened.
Usage analytics via Firebase Analytics — which screens are opened and which games are played, in aggregate.
Advertising via Google AdMob, which uses device advertising identifiers to select and measure ads. If you subscribe to Face Off Plus, no ads are requested at all and no ad identifier is used.

What we never collect

The app has no camera, microphone, photo library, contacts or location permissions, and asks for none. Earlier designs of this game used face tracking; that was removed and no version of the app on a store has ever captured video or images of you.

3. What stays on your device

Your graphics quality, frame-rate preference, notification toggle and whether you have seen the intro are stored on your phone and never sent to us. The app also keeps an encrypted local cache of your own profile and match history so it opens quickly and works briefly offline. It is encrypted with a key held in your device's secure keystore, and it is deleted when you sign out.

4. Why we're allowed to hold it

To provide the game — a profile, matchmaking, leaderboards and friends cannot work without the data above. This is the performance of our agreement with you.
Our legitimate interests — keeping the game working and free of abuse, which covers crash reports and player reports.
Consent — personalised advertising, where your platform requires your permission before an advertising identifier is used. You can withdraw it in your device settings at any time.

5. Who else sees it

We do not sell your data. We share it only with the services that run the game:

Supabase — hosts our database and handles sign-in.
Google Firebase — crash reporting, analytics, and this website.
RevenueCat — subscription status.
Google AdMob — advertising, unless you subscribe.
Apple, Google, Discord and X — only to verify who you are at sign-in.

Other players can see your display name, avatar, country and leaderboard standing. They cannot see your email address, and there is no way in the app to reveal it.

6. Where it lives

Our database is hosted in the European Union. Our service providers may process data in other countries, including the United States, under the safeguards their own terms provide.

7. How long we keep it

Your profile and stats: until you delete your account.
Match records: kept after deletion with your name removed, because a match is also the other player's history.
Support messages and deletion requests: up to 24 months, so we have a record of what was asked and what we did.
Crash and analytics data: according to Firebase's own retention settings.

8. Your rights

Depending on where you live, you may have the right to see the data we hold about you, correct it, delete it, object to how we use it, or receive a copy of it. To use any of these, send us a message.

Deletion is immediate and in your own hands: Profile → Delete Account. If you can't reach that, use the deletion request form.

9. Children

Face Off is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, tell us and we will remove it.

10. Changes

If we change this policy we will update the date at the top, and for anything significant we will say so in the app.