⚙ SMASHED FLAT ⚙

← Back to Home

Privacy Policy

Last updated: October 6th, 2026

This Privacy Policy explains how Smashed Flat collects and uses personal data.

1. Information We Collect

• Email address and username
• Account and login information
• Date of birth (to verify eligibility and apply age-appropriate default settings, such as our profanity filter)
• Profile information you choose to add (such as gender, your "about me" text, badge selection, and theme/timezone preferences)
• Friend, block, and privacy settings (who you add as a friend or block, and who can message, friend-request, or see your profile/online status)
• Chat and message content
• Reports and support tickets you submit, including any screenshots or other files you attach, and - if you contact us without logging in - the name and email you provide as a guest
• Moderation and safety records, such as warnings, bans, and the data needed to enforce them (which can include IP addresses)
• Payment information (handled by third-party processors)
• IP address, device info, usage data, cookies

2. How We Use Data

We use collected data to provide and operate the game, manage accounts and payments, enable chat and messaging, prevent fraud and abuse, improve gameplay, and comply with legal obligations.

3. Legal Basis (GDPR)

We process data based on contract necessity, legitimate interests, legal obligations, and consent where required.

4. Chat, Messaging & Reports

Messages, reports, and support tickets may be stored and reviewed for moderation, safety, and legal compliance. If you report another player or submit a support ticket, the content you provide (including any screenshots or relevant chat excerpts) is shared with our moderation/support staff for review.

5. Cookies

We currently use only strictly necessary cookies - specifically, a session cookie that keeps you logged in. Preferences such as your theme and timezone are saved to your account, not a cookie. We do not currently use advertising, analytics, or other optional cookies; if that changes, we will update this Cookie Policy first. See our Cookie Policy for more detail.

6. Third-Party Services

We use a small number of third-party services to help operate the Service, each of which processes limited data on our behalf:

• Google reCAPTCHA - helps verify you're not a bot when you register or log in; this can send technical data (such as your IP address and browser information) to Google.
• Cloudflare - provides content delivery and security (such as DDoS and bot protection) for the Service, and may process connection data (such as IP address) as part of that protection.
• Our hosting and email providers - store the Service's data and deliver account-related emails (such as verification and password-reset emails) on our behalf.

7. Data Sharing

We may share data with hosting providers, our email delivery provider, Google reCAPTCHA, Cloudflare, payment processors, and legal authorities if required. We do not sell personal data.

8. Data Retention

We retain data only as long as necessary for operation, legal compliance, and dispute resolution. If you delete your account, your account and the data relating to it are permanently deleted, except for moderation records, which may be kept for safety and legal purposes.

9. Data Security

We use reasonable measures to protect data but cannot guarantee absolute security.

10. Your Rights

GDPR: access, correction, deletion, restriction, portability, objection.

CCPA: know, delete, opt-out of sale (we do not sell data), non-discrimination.

You can directly update most of your account information, adjust your privacy settings (who can message or friend-request you, and whether your profile or online status is visible), or delete your account at any time from Account Settings, without needing to contact us first.

For anything else, see Section 14 (Contact) below.

11. Children

The Service requires all users to be at least 13 years old, and we collect date of birth at registration to help verify this. We do not knowingly collect data from children under 13; if we learn that we have, we will delete it.

12. International Transfers

Data may be processed outside your country with appropriate safeguards.

13. Changes

Updates will be posted on this page.

14. Contact

For privacy questions or requests, please submit a ticket - no account is required.