Fluffies — Privacy Policy

Last updated: 1 July 2026

1. Who we are

Fluffies is developed by an independent developer. If you have any questions about this policy or your data, contact us at info@fluffies.games.

2. Camera & face-tracking data

Fluffies uses your device's front-facing camera for on-device face-tracking that powers the game's controls. Head position is used to aim your weapon, which fires automatically once locked onto a target. By default, other actions — collecting falling pickup boxes (extra lives, bombs and ammunition), detonating a collected bomb to clear the current wave of enemies, and, when Hard Mode is enabled in Settings, destroying certain enemies — are confirmed by holding your aim locked on the target through a short 3 · 2 · 1 countdown, with no blinking required. Blink detection is an optional alternative for confirming those same actions, used only if you turn Disable Blink Detection off in Settings. All face and blink processing is done entirely on your device.

• No camera image, video frame, or face-landmark data is ever transmitted off your device.
• No camera image, video, or face data is stored by us, anywhere, at any time.
• The camera is only active while you are actively playing; it is not used in the background.

3. Account data

You can play Fluffies as a guest with no account at all — in this case, no personal data is collected and no progress is saved between sessions.

If you choose to create an account, we store:

• Username — chosen by you.
• Password — stored only as a one-way cryptographic hash (bcrypt); we cannot see or recover your actual password.
• Email address (optional) — only if you choose to provide one. We let you know at registration that, once set, an email address cannot later be changed.

4. Gameplay data

If you have an account, we store your game scores, mission/level progress, and leaderboard entries so you can resume your game and compare scores with other players. This data is tied to your account and is not shared with any third party.

5. Purchases

Fluffies offers optional in-app purchases of consumable gameplay items (extra lives and bomb bundles). Purchases require a logged-in account and are processed through Apple's In-App Purchase system via RevenueCat, a third-party purchase infrastructure provider. RevenueCat receives your purchase transaction data (such as the anonymised app-specific user identifier and product purchased) solely to verify and grant your purchase; we do not share your account username, password, or email address with RevenueCat. No payment card details are ever seen by us or RevenueCat — these are handled entirely by Apple.

6. Security & abuse prevention

To protect accounts from automated abuse, we briefly log the IP address and username associated with failed login attempts. These records are automatically deleted after 24 hours and are not used for any other purpose.

7. Third parties

Fluffies does not use any third-party advertising, analytics, or tracking services. The app does not display ads. The face-tracking model is bundled within the app itself. Some game assets — background videos and character animations for cities and encounters beyond the first — are downloaded from our own servers (fluffies.games) the first time you reach them, rather than being bundled with the initial app download. The app makes no connections to any third-party content-delivery network or service for gameplay, other than RevenueCat for purchase processing as described above. The only network connections the app makes are to our own backend (fluffies.games) — to save and load your account, scores, and progress, and to download the game assets described above.

8. Your choices

• You can play entirely as a guest, with no account and no data collected.
• You can change your password at any time from the Profile screen in the app.
• You can permanently delete your account, along with all associated scores and progress, at any time from the Profile screen in the app (Profile → Danger Zone → Delete Account). This action is immediate and cannot be undone.

9. Children's privacy

Fluffies is a general-audience game and does not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at info@fluffies.games and we will delete it.

10. Changes to this policy

If this policy changes, the updated version will be posted at this same address with a revised "Last updated" date.

11. Contact

For any questions about this privacy policy or your data, contact info@fluffies.games.

This policy is provided in multiple languages for your convenience. The English-language version is the original and legally controlling text; in the event of any conflict or inconsistency between translations, the English version prevails.