FlappyTone — Privacy Policy

Last updated: 14 October 2026

This policy explains what personal data FlappyTone ("we", "us") collects, why, and your rights over it. FlappyTone is operated by Pierre Bruyninckx, an independent developer, at flappytone.com. For any privacy question or request, contact pierre@pierrebuilds.dev.

We are based in Taiwan and follow a data-minimal approach: we ask for personal data only when we genuinely need it, and we keep as little as possible. We aim to comply with Taiwan's Personal Data Protection Act (PDPA) and, for users in the EU/EEA and UK, the GDPR.

Your voice is never sent to us

FlappyTone listens to your voice through your device's microphone to drive the game. This audio is processed entirely on your device (in your browser) and is never uploaded, recorded, or stored by us. We only ever keep the derived numbers your play produces — such as your score, per-tone accuracy, your recent runs and, for EarlyBird accounts, your full run history and average pitch shape per tone (see below) — not any audio. FlappyTone also uses no AI models for this; pitch detection is plain on-device signal processing.

What we collect

If you play as a guest (no account):

Game state and progress stored locally in your browser (localStorage) — runs, streaks, daily-run counter, settings. This stays on your device and is not sent to us.

If you create an account:

Email address (to sign in, sync your data, and contact you about your account).
Display name you choose (shown on the leaderboard if you join it).
Gameplay aggregates stored with your account — best score, run and gate totals, streaks (including the last day you played), the words you have played, and per-tone accuracy statistics. If you played as a guest on this device before signing up or signing in, those local totals are added to your account once.
Your last 5 runs (free accounts). To show the same recent runs and tone accuracy on every device, we store your 5 most recent runs: when each happened, the game mode, your score, how many gates you flew, how the run ended, and your tone accuracy for the run and per tone (or two-tone combination). Older runs are deleted automatically when a new one is stored. These are numbers derived on your device, not audio. They are deleted with your account.
Marketing consent — whether you opted in to product-update emails, and when.

If you buy EarlyBird access:

Your average tone shape. To show how your tones evolve over time, we store, per day and per tone (or two-tone combination), the running total of your pitch shapes and how many attempts it covers. A shape is 61 numbers describing how high or low your voice was across one attempt, measured on your device. It is not audio and cannot be turned back into your voice. We only compute and store this for EarlyBird accounts; guest and free accounts never send it. It is deleted with your account; to have it deleted on its own, email us.
Your run history. To show your history and your daily progress, we store one row per run you play after you get access: when it happened, the game mode, your score, how many gates you flew, how the run ended, and your tone accuracy for the run and per tone (or two-tone combination). These are numbers derived on your device, not audio. We keep every run for EarlyBird accounts (free accounts keep only their last 5, above; guests keep their last runs on their own device only). It is deleted with your account; to have it deleted on its own, email us.
Your purchase is handled by Lemon Squeezy as merchant of record. They collect the payment and billing details needed for the transaction and tax. We do not receive or store your card number. We receive confirmation that your account has access, and basic order information (such as your email and order reference).

When you use the site (analytics):

Usage analytics via PostHog, in two categories. General usage data, such as which screens you visit, which game mode you pick, and settings or account actions, is collected to understand how the app is used and to fix problems; this does not require a separate opt-in. Gameplay data, such as which gates you hit or miss, your calibration numbers, and Tone Visualiser practice, is only collected if you leave "Anonymous game data" turned on in Settings. Turning it off stops that data immediately; it does not delete the anonymous identifier already used for general usage data.

Legal bases for processing

Performance of a contract — running your account, syncing your data, and providing paid access.
Consent — sending you marketing emails, and gameplay analytics (see above). You can withdraw consent at any time.
Legitimate interests — keeping the service secure, preventing cheating/abuse, general usage analytics (see above), and improving the product, balanced against your rights.

Who we share data with (processors)

We don't sell your data or share it publicly, except as needed to run the service or as required by law. Our processors:

Supabase — database, authentication, and hosting of your account data (project hosted in the Tokyo (ap-northeast-1) region). Access is protected by row-level security.
Lemon Squeezy — payment processing as merchant of record.
PostHog — product analytics.
Kit (ConvertKit) — sending our newsletter / product-update emails to people who opted in.
Vercel — application hosting and delivery.

Each processes data on our behalf under its own terms. Some may process data outside your country, including outside the EU/EEA, under appropriate safeguards.

Cookies and local storage

FlappyTone uses your browser's local storage to keep your game progress and settings, and to remember a device identifier for the leaderboard. PostHog may set cookies or similar identifiers for analytics. We don't use third-party advertising cookies.

Marketing emails

We only send product-update emails if you opted in (an unchecked box you tick at signup). Account/service emails (such as sign-in and purchase confirmations) are sent regardless, because they're necessary to provide the service. Every marketing email includes an unsubscribe link, and you can opt out at any time.

Data retention

We keep account data for as long as your account exists. If you delete your account (or ask us to), we delete or anonymise your personal data within a reasonable period, except where we must keep certain records (for example, transaction records Lemon Squeezy holds for tax/legal reasons). Locally stored guest data lives only in your browser until you clear it.

Your rights

Depending on where you live (including under Taiwan's PDPA and the EU/UK GDPR), you can ask to: access your data; correct it; delete it; restrict or object to processing; receive a portable copy; and withdraw consent at any time. To exercise any of these, email pierre@pierrebuilds.dev. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

Children

FlappyTone is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we'll remove it.

Changes

We may update this policy as FlappyTone evolves. Material changes update the "Last updated" date and, where significant, will be communicated to account holders.

Contact

pierre@pierrebuilds.dev