Privacy Policy

Introduction

Welcome to Flood Surfers. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website services.

By registering an account, connecting to our multiplayer lobbies, or playing the game, you consent to the data practices described in this policy.

Data We Collect

To deliver an optimized, synced gameplay and lobby experience, we collect specific types of information:

Account Registration Info: Your username and password hash when you create a profile. This is required for secure authentication and progress synchronization.
Gameplay Progress & High Scores: Your Total XP, total runs, number of plastic bottles collected, and level high scores across regional stages (Lagos, Accra, Uyo, Kano).
Lobby Details & Room Sessions: Active room names, participant connection state, and ready status during live multiplayer runs.
Connection Metadata: Technical telemetry (IP address, WebSocket status, and device metadata) required to maintain low-latency connections to the server.

How We Use Your Data

Your data is processed exclusively to support the functionality of Flood Surfers, specifically to:

Provide core single-player and real-time social runs.
Store and sync high scores and leaderboard standings.
Maintain room lobby security via JWT session validation.
Help administrators monitor network diagnostics and maintain overall database health.

Note: We do not sell your personal data to advertisers, third parties, or brokers under any circumstances.

Data Security

We implement robust technical and organizational security measures to protect your data, including:

Password encryption using the industry-standard bcrypt algorithm.
Securing web and WebSocket endpoints with JWT authentication tokens.
Restricting admin functions and database queries behind secure, encrypted credentials.

Your Data Rights & Deletion

Depending on your jurisdiction (such as under GDPR or CCPA), you have the right to access, edit, or request complete deletion of your account and gameplay data at any time.

If you wish to remove your account from our records permanently, you can do so immediately and autonomously by visiting our self-service Account Deletion Request Page. Deleting your account will immediately purge your credentials, high scores, runs, and friends lists from both active memory and fallback databases.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect modifications in game mechanics or legislative requirements. We encourage users to check this page periodically for updates.

Contact Us