Privacy Policy
Last updated: 1 November 2026
Vexilia is a flag-guessing game. This policy explains what information the app handles, why, and what rights you have over it. It is written to reflect how the game actually works, both offline and with its online features (rankings and percentile).
Who is responsible
The data controller is the developer of Vexilia. You can get in touch any time at razvi.alex626@gmail.com.
Data kept on your device
Your game progress is stored locally on your phone. A copy is also kept on our server so you can get it back (see the next section). This includes:
- Your daily streak, best scores and achievements.
- The flags you got wrong (for the Review mode).
- Your preferences, such as language.
If you uninstall the app this data is deleted from the phone, but you can get it back from the copy of your progress (by itself when you reinstall the app or on a new phone with the same iCloud or Google account; between an iPhone and an Android phone, with your recovery code). Your phone's iCloud or Google backups may also include it.
Data sent to our server
When you use the game's online features (for example, to see your real percentile against other players or take part in the ranking), the app sends our server the minimum information needed to make those features possible:
- An anonymous device identifier: a random code (UUID) generated by your own phone. It is not your Google or Apple account, your phone number, or anything that identifies you personally. It only lets us recognise that several results come from the same device. So that your progress comes back by itself, the app also keeps this code in the phone's keychain and in your iCloud account (iPhone) or Google's backup storage (Android). We have no access to your iCloud or Google account: only the app keeps this code there. The "Delete my data" option removes it from those places too.
- A copy of your progress: your Daily Flag streak and stats, achievements, records, final challenges, the flags you got wrong, your Duel nickname and flag, and your preferences (language, sound, fun facts). It is updated when it changes and is used only to give it back to you if you change phones or reinstall the app. It is only handed to your own device or to whoever has your recovery code.
- Your recovery code (only if you create one): to move between an iPhone and an Android phone, from Settings → Your progress → "Switching between iPhone and Android?" you can create a code (for example "VEX-7K2M-9QXD-4TPA") to get your progress back on another phone. We don't store the code on the server, only an encrypted fingerprint that lets us recognise it. Anyone who has it can bring your progress to their phone, so keep it like a password. If you create a new one, the previous one stops working.
- Your Daily Flag result: the date, whether you solved it, how many attempts you used, the time taken and the sequence of guesses. This lets us calculate your percentile and validate the game.
- Anonymous usage events: when the app is opened, which section or game mode is opened, how a game ends (correct answers, attempts), whether a result is shared and which settings are changed, together with the app version, the platform (iOS or Android) and the language. They tell us which parts of the game are used so we can improve it. They never include anything you type or any contact details.
- Duel mode (only if you play it): the nickname you choose (typed by you or generated by the app, for example "Swift Lynx 42"), the flag you pick as your avatar, your experience points, level and number of duels and wins, and each game: the flags, the option picked in each round and how long it took. Your opponent sees your nickname, flag and level. The weekly and monthly rankings show every player the place, nickname, flag, level and experience earned in that period of the top 100, and the yearly one each month's champion; your own place is shown only to you. Every player has a friend code that only the people you give it to see: if someone adds it (or adds you after a duel), you are saved as friends and each of you sees the other's nickname, flag, level and whether they have the duel open, so you can challenge each other. You can remove or block a friend at any time. Your finished games may later be played as a "recorded game" against other players, who will see that same nickname, flag and level. There is no chat: the nickname is the only text other players see, and the app filters out insults, links and contact details. If you report or block an opponent, we store who reported or blocked whom and the reported nickname, so you are not paired again and the report can be reviewed; a nickname reported by several players is retired and replaced with a generated one, and players who break the rules can be expelled from Duel mode.
- Suggestions (only if you choose to send one): from Settings → Suggestions you can write a suggestion (up to 500 characters) and choose which part of the game it is about. It is stored with the anonymous device identifier, the language, the platform and the app version, and emailed to the developer so it can be read. Please do not include personal details in it.
- Language and, optionally, country (for country leaderboards). Country is approximate and is never your exact location.
What we never collect
- We do not ask for your name, email, password or any account creation.
- We do not collect your precise location (GPS).
- We do not use advertising, trackers or third-party analytics SDKs.
- We do not sell or share your data with anyone.
Legal basis (GDPR)
Processing of the data sent to the server relies on the legitimate interest of providing the game's ranking and percentile features and the recovery of your progress, and preventing fraud in those rankings. Because the data is anonymous and minimal, the impact on your privacy is very low.
Who processes the data and where
The server runs on Cloudflare infrastructure, acting as data processor. Data may be processed in Cloudflare data centres in different countries; these international transfers are covered by the standard contractual clauses of Cloudflare's data processing agreement. Your IP address is not stored in association with your results.
How long it is kept
Game results are kept for as long as they are useful for the game's statistics and rankings. Suggestions are kept for as long as they are useful to improve the game. You can request their deletion at any time (see below).
Your rights
You can exercise your right of access, rectification and erasure. As the game uses no accounts, the most direct way to delete your server data (including the copy of your progress and your recovery code) is the in-app delete option, or writing to razvi.alex626@gmail.com with your device identifier. You also have the right to lodge a complaint with your local data protection authority.
Children
Vexilia is not directed at children under 13 and does not knowingly collect data from children under that age.
Changes to this policy
If we change how data is handled, we will update this page and its date. Material changes will also be reflected in the store listings before they take effect.
Contact
For any privacy questions: razvi.alex626@gmail.com.