Face OffPrivacy Policy
Written to be read. If something here is unclear, that is a fault we want to hear about.
The short version. Face Off stores a display name, an avatar, a six-digit friend code, your country, and your game results. It never uses your camera, microphone, contacts or GPS, and never reads your photos. There is no advertising in Face Off, and nothing in it tracks you. You can delete everything from inside the app.
1. Who we are
Face Off is a mobile game for iOS and Android. In this policy, “we” means the developer of Face Off, and “the app” means the Face Off mobile application. If you want to reach us about anything here, use the support form.
2. What we collect
When you sign in
You sign in with an email address, or with Google, Apple or Discord. We never see your password. From your chosen provider we receive an account identifier, and where the provider supplies them, a display name and an avatar image URL. Some providers also supply an email address; Discord may not, and the app works without one.
Your profile
- Display name and avatar.
- A six-digit friend code, generated by us, so other players can add you.
- Your country, determined from your device’s language and region settings — used for regional leaderboards. We do not use GPS, and we do not collect your precise location.
How you play
- Match results: which game, the scores, who won, and when.
- Totals derived from those results: matches played, win rate, win streak.
- Your friends, friend requests, and anyone you have blocked.
- Reports you submit about another player, including the reason you chose.
- A “last seen” timestamp, so the app can show roughly how many players are online.
Notifications
If you allow notifications, we store a push token for your device — an identifier issued by Apple or Google through Firebase Cloud Messaging — so we can tell you about friend requests and match invites. It is deleted when you sign out or turn notifications off.
Purchases
Subscriptions are processed by Apple or Google, not by us. We never receive your card details. We store whether your account is currently subscribed, which product, and when it renews or expires — supplied to us by RevenueCat, our subscription provider.
Referrals
If you enter someone’s invite code, we record that they invited you, so their reward can be credited. That link is visible to you and to them, and to nobody else.
Diagnostics
- Crash reports via Firebase Crashlytics, so we can fix what breaks. These include device model, operating system version, and where in the app the crash happened.
- Usage analytics via Firebase Analytics — which screens are opened and which games are played, in aggregate.
What we never collect
The app never uses your camera, microphone or contacts, never reads your photo library, and never uses GPS. It asks for at most two permissions, each only when it is needed: notifications, and permission to add a picture to your photos if you choose to save your stats card. Neither is required to play.
There is no advertising in the app and no advertising identifier is used. Earlier versions included ads and asked for tracking permission on iPhone; both have been removed, and the app no longer contains the App Tracking Transparency framework at all.
Earlier designs of this game used face tracking; that was removed, and no version of the app on a store has ever captured video or images of you.
3. What stays on your device
Your graphics quality, frame-rate preference, notification toggle and whether you have seen the intro are stored on your phone and never sent to us. The app also keeps an encrypted local cache of your own profile and match history so it opens quickly and works briefly offline. It is encrypted with a key held in your device’s secure keystore, and it is deleted when you sign out.
4. Why we’re allowed to hold it
- To provide the game — a profile, matchmaking, leaderboards and friends cannot work without the data above. This is the performance of our agreement with you.
- Our legitimate interests — keeping the game working and free of abuse, which covers crash reports and player reports.
We no longer rely on consent for anything, because the only thing we used it for was personalised advertising, and there is none.
5. Who else sees it
We do not sell your data. We share it only with the services that run the game:
- Supabase — hosts our database and handles sign-in.
- Google Firebase — crash reporting, analytics, push notifications, and this website.
- RevenueCat — subscription status.
- Apple, Google and Discord — only to verify who you are at sign-in.
Other players can see your display name, avatar, country and leaderboard standing. They cannot see your email address, and there is no way in the app to reveal it.
6. Where it lives
Our database is hosted in the European Union. Our service providers may process data in other countries, including the United States, under the safeguards their own terms provide.
7. How long we keep it
- Your profile and stats: until you delete your account.
- Match records: kept after deletion with your name removed, because a match is also the other player’s history.
- Support messages and deletion requests: up to 24 months, so we have a record of what was asked and what we did.
- Crash and analytics data: according to Firebase’s own retention settings.
8. Your rights
Depending on where you live, you may have the right to see the data we hold about you, correct it, delete it, object to how we use it, or receive a copy of it. To use any of these, send us a message. Deletion is immediate and in your own hands: Profile → Delete Account. If you can’t reach that, use the deletion request form.
9. Children
Face Off is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, tell us and we will remove it.
10. Changes
If we change this policy we will update the date at the top, and for anything significant we will say so in the app.