Flatout ATC Help

Privacy Policy

Last updated 2026-05-23

Flatout ATC Privacy Policy

Flatout ATC and your data

I firmly believe in privacy and in the principle that your data is your data. This is how your data are used.

A) Identifiable data

What do I store and how do I store it?

With the exception of your level progress, all data which you create in games are only stored on your iOS device. I have no access to it.

Your level progress is stored, using your Game Center login token, on a Google Firestore server to allow for progress to be maintained across devices. The Game Center login token has no identifying information about you — I cannot tell who you are by looking at that token. Stored along with that token are your current level progress, the score per level, and the last difficulty you attempted.

If you send a message to support, either a general message or a message with a log attached, I use a service called HelpScout. You are subject to their privacy policy as well. When you send a message, the service collects basic information about your device: the IP address from where you sent it, the location (town-level) from where it was sent, and a basic device type. If we have conversations using the email service built into the game, those conversations are stored on my helpdesk provider's servers.

When you send a log, the log only contains information about game execution — no data which identifies you personally are collected.

What do I do with your data?

I treat it with respect. Apart from what is needed to run or support Flatout ATC, I will never share your personal data with a third party and I will never sell your personal data.

If you contact support using the options on the support page, your email address and the conversations we have are stored on my helpdesk provider's servers.

Flatout ATC also uses third-party services to support advertising and analytics, as described below.

Feedback you submit

When you tap Feedback in the game and submit a rating + comment, your submission is published as an anonymous post on the Talk to the developer board at flatout-atc.com/talktothedeveloper. The public post carries the star rating, the level you were playing (if any), and your written comment. No name, email, or account identifier is attached to the public post.

Separately and privately, we record your Firebase account ID in a collection that only the developer can read. We use this private mapping solely to:

  1. Notify you within the game when the developer replies to your feedback.
  2. Honour any deletion or access request you make under data protection law.

We do not share the mapping with anyone else, do not use it for advertising or analytics, and do not export it outside the project's Firebase / Google Cloud environment.

Legal basis for processing

Submitting feedback is voluntary, and tapping the Send button counts as your consent (UK/EU GDPR Article 6(1)(a)). For the private UID mapping that routes replies back to you, we additionally rely on our legitimate interest in providing a working reply channel (Article 6(1)(f)).

Retention

We keep your feedback post — and the associated private UID mapping — for as long as the post is live. When the developer deletes a post, the private mapping is automatically removed at the same time. You can request earlier deletion at any time.

How to delete your feedback

Tap Settings → Contact Support and ask us to delete your feedback. We will remove the public post, the private UID mapping, and any associated reply notifications. We will confirm by email or in-app message once it is done. We aim to action requests within 30 days as required by Article 12(3).

How to access your feedback data

To request a copy of feedback you have submitted, contact us via Settings → Contact Support. We will provide a machine- readable export of every feedback post tied to your Firebase account ID within 30 days (Article 15).

Where this data lives

Both the public post and the private UID mapping are stored in Google Cloud Firestore inside our project hosted in the United States. Google's standard contractual clauses apply to any EU/UK → US transfer. See Google's own Privacy & Security page for details on their role as our processor.

How is your data used within the Flatout ATC app?

If you email me with a problem, I may ask you to send information about your app usage only to help solve the problem.

Data captured to improve Flatout ATC

I use two methods of collecting anonymous technical data to improve Flatout ATC.

I use a crash reporter called Firebase Crashlytics and an analytics service called Firebase Analytics. These features track usage and app crashes.

If the app crashes for you, the next time you load the app, technical data about what was happening right before the crash are uploaded. This information includes non-identifiable technical data such as device type and system state at the time of the crash. I use my own logs (which you may choose to send to me) to correlate what happened with that crash data. These logs are sent using the logging module on the settings screen.

Firebase Analytics collects aggregated data about which features are being used the most. There is no personal identifying information collected through analytics. I use these data to understand how the app is being used and where to focus development efforts.

Advertising and tracking

Flatout ATC may display advertisements within the app using a third-party advertising service called Google AdMob.

What information may be collected?

Advertising services may automatically collect certain technical information from your device, including:

  • Device identifiers (such as Apple's Identifier for Advertisers, or IDFA)
  • Device type and operating system
  • App usage information
  • Advertising interaction data
  • Diagnostic information

This information is used to display advertisements and to measure their effectiveness.

Apple Search Ads attribution

When you install Flatout ATC from an Apple Search Ads campaign, your device provides us with anonymous campaign identifiers (campaign ID, ad group ID, keyword ID, and country/region) via Apple's AdServices framework. We use this data to measure the effectiveness of our advertising and to understand which acquisition channels lead to better player experiences.

This data is captured once per device install, sent to Apple's attribution servers at api-adservices.apple.com, and stored alongside your account record in Firebase. It does not include personally identifying information, your Apple ID, or your Identifier for Advertisers (IDFA). Apple's AdServices framework does not require App Tracking Transparency consent because the data is first-party — between your device and Apple — and does not enable cross-app tracking.

We retain this attribution data for the lifetime of your account and do not share it with any third party other than Apple (the source) and Firebase / Google Cloud (our backend storage provider).

Personalized advertising and App Tracking Transparency

If you grant permission through Apple's App Tracking Transparency (ATT) prompt, advertising partners may use your device identifier to deliver more relevant advertisements and to measure advertising performance across apps and services.

If you decline permission, advertisements may still be shown, but they will not use the IDFA for cross-app tracking.

You can change your tracking preference at any time in:

Settings → Privacy & Security → Tracking

Linking of data

Flatout ATC does not link device identifiers, advertising identifiers, or analytics data to your name, email address, or any user account. I do not create user profiles or personally identify users through advertising data.

Third-party advertising provider

Advertising in Flatout ATC is provided by:

Google AdMob — Google LLC — policies.google.com/privacy

I encourage you to review Google's Privacy Policy for more details on how advertising data may be handled.

Summary

Flatout ATC is designed to respect your privacy.

  • Your game data remain on your device.
  • Your progress is stored anonymously using a Game Center token.
  • Crash and analytics data are technical and non-identifying.
  • Advertising data, when used, are handled by trusted third-party providers and are not linked to your personal identity by me.
  • Feedback you submit is published anonymously; your account ID is kept privately and only used to route the developer's replies back to you.

If you have any questions about privacy, please contact me through the support page within the app.