What the game collects, what it never collects, and why.
Last updated 29 August 2026. Applies to the Flashy Bird iOS app and to flashybird.space.
The short version. Flashy Bird has no accounts and asks for nothing about you. It sends anonymous gameplay measurements — how a run went, what ended it — to a server we run ourselves in Germany. There are no ads, no third-party analytics or advertising SDKs, and no tracking of any kind. Nothing collected can identify you, and nothing joins to anything outside the game.
Johannes Nanninga, Vereinsstraße 6, 12487 Berlin, Germany — support@flashybird.space. Full provider details are in the Impressum.
One record per level attempt, built when the attempt ends. Each record describes the run, never the player:
Alongside this the app generates a random install identifier the first time it runs. It is a random number created on your device, stored only on your device, and it joins to nothing — not to your Apple ID, your name, your email, your device, or any advertising identifier. Its only purpose is to tell one install's runs apart from another's so that "the same player got further on the second try" is a statement the data can make. If you reset your progress in the app, the identifier is discarded and replaced, and that install becomes a new one to us.
To find out whether the difficulty is fair. Flashy Bird has fifty zones of increasing difficulty, and no amount of playing it ourselves establishes whether the twentieth is too hard or the fortieth too easy. The measurements exist to answer that, and to answer whether an upgrade we sold made the game more interesting rather than merely easier.
The legal basis is our legitimate interest in understanding and improving the game (Art. 6(1)(f) GDPR). We consider this proportionate because the data cannot identify anyone, is not combined with anything, is not shared, and is not used to advertise to you. Because there is nothing personal in it, there is no consent prompt and no in-app switch — a toggle would imply the data is about you, and it is not.
To a server we operate ourselves, hosted at Hetzner Online GmbH in Germany. Nothing is sent to any other company. Records are kept for as long as they are useful for tuning the difficulty curve and are deleted when they are not; aggregate figures derived from them may be kept longer, but those cannot be traced back to an install.
Builds distributed through TestFlight and to Apple's own App Review team report into a separate testing dataset, so pre-release play never mixes into the numbers the real game is tuned on.
Flashy Bird is suitable for all ages and is not directed at children specifically. It collects no personal data from anyone, of any age, and shows no advertising. Purchases are real money and are protected by Apple's own parental controls — Screen Time → Content & Privacy Restrictions → In-App Purchases.
flashybird.space is a static page. It sets no cookies and there is no cookie banner, because there is nothing to consent to. It loads no fonts, scripts or images from anyone else's server, so visiting it tells no third party anything. Our web server keeps short-lived operational logs — the usual request lines, including your IP address — to keep the site running and secure, and nothing else about the visit is recorded.
If we later add a visitor count, it will be self-hosted, cookie-free and unable to recognise you on a return visit — that is a constraint we are stating in advance, not a promise about something already running.
Under the GDPR you have rights of access, rectification, erasure, restriction, objection and portability. We want to be straightforward about what that means here: because the data contains nothing that identifies you and we hold no account, we are generally unable to find "your" data in order to show or delete it, and Art. 11 GDPR does not require us to collect more information merely to make identification possible.
What you can do instead, at any time and without asking us: resetting your progress in the app discards the install identifier, which permanently severs any link between what was sent before and what is sent afterwards. If you have a question about any of this, write to support@flashybird.space. You also have the right to complain to a supervisory authority; ours is the Berlin Commissioner for Data Protection and Freedom of Information.
If what we collect changes, this page changes in the same release, and the date at the top moves with it. A change that made anything in "What the app never collects" untrue would be a change to the promise, not a detail, and would be called out here rather than quietly edited.