This privacy policy applies to the Islands Flow app for mobile devices and web browsers, together with any related services operated by 3wg (collectively, the "Application"). 3wg is hereby referred to as the "Service Provider".

The Application collects information when you download and use it. This information may include information such as

• Your device's Internet Protocol address
• The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
• The time spent on the Application
• your operating system you use

The Application uses GameAnalytics to collect gameplay-related data, including level starts, completions, scores, time spent on levels, and session information. This data is used to improve the Application and provide a better user experience. No personally identifiable information is collected through gameplay analytics.

The Application stores the user's year of birth locally on the device to determine age. This data is never transmitted, collected, or shared with the Service Provider or any third party. It remains exclusively on the device and is used to adjust data collection practices: for users under 14, Firebase Authentication and Firebase Cloud Functions are disabled, while GameAnalytics continues to operate using randomized, non-persistent identifiers that cannot be linked to a specific user.

The Application communicates with cloud functions hosted by Firebase (Google Cloud) to provide daily challenge seeds and leaderboard features. When you complete a daily challenge or a level, the Application may send and store the following information on Firebase servers: your anonymous user identifier (assigned by Firebase Authentication), the level identifier, number of stars achieved, completion time (in milliseconds), calculated score, and platform type (Android or web). This data is used solely to calculate rankings and display leaderboards. No personally identifiable information, such as your name or email address, is collected or stored on the server. Leaderboard data is stored temporarily and may be deleted at any time. Users under 14 years of age do not send any data to Firebase servers.

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.

You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at [email protected].

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at [email protected].

The Service Provider may use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.

For a better experience while using the Application, the Service Provider may require you to provide certain personally identifiable information, including but not limited to your email address. The information the Service Provider requests will be retained and used as described in this privacy policy.

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement. For users under 14 years of age, Firebase services (Authentication and Cloud Functions) are disabled and no data is transmitted to Firebase. GameAnalytics remains active for users under 14 but operates exclusively with randomized, non-persistent identifiers that cannot be used to identify or track a specific user. When the Application is accessed through CrazyGames, the CrazyGames SDK may collect a user identifier, authentication token, and gameplay events (such as gameplay start, stop, and session duration) to support platform features including leaderboards and audio settings.

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms.

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions or other legally recognized transfer mechanisms
• Your consent, where required and legally permitted

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

The Service Provider may disclose User Provided and Automatically Collected Information:

• as required by law, such as to comply with a subpoena, or similar legal process;
• when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with their trusted services providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.

To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at [email protected].

The Service Provider retains personal data based on its necessity for the stated purposes:

• User Provided Data: Retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law
• Automatically Collected Data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance
• Aggregated and Anonymized Data: Retained indefinitely as it no longer identifies you
• Data required for legal compliance: Retained as long as required by applicable law

You may request deletion of your personal data, subject to any legal obligation to retain it. If you want the Service Provider to delete User Provided Data submitted through the Application, please contact them at [email protected]. Please note that some User Provided Data may be required for the Application to function properly.

The Application is not restricted by age and may be used by persons of any age, including children. The Service Provider does not knowingly collect any personal data from users under 14 years of age. For users under 14, Firebase Authentication (including anonymous sign-in) and Firebase Cloud Functions (daily challenges, leaderboards) are disabled, and no data is transmitted to Firebase servers. GameAnalytics continues to operate for users under 14 but uses randomized, non-persistent identifiers in compliance with COPPA, collecting only generic gameplay statistics (such as level completions and session duration) that cannot be linked to a specific user. The user's year of birth is stored exclusively on the device and is never transmitted.

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at [email protected].

This privacy policy is effective as of 2026-07-21

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at [email protected].

This privacy policy page was generated by App Privacy Policy Generator