Squadlings privacy
Last updated 18 October 2026
Squadlings is a free game for the browser, Android and iOS. It plays online: you need a free account (a name with a recovery code, or Google), and your game is kept on our server so it opens on any device you sign in on. Your device keeps only a copy of the last view and the session that signs you in.
What is stored
- The display name you choose, your friend code, rating and title.
- Your game (progress and the moves that led to it), your battles, friends, gifts and club.
- Hashes (one-way scrambled codes) of your recovery code and session token, never the codes themselves.
- If you sign in with Google: a hash of the user id Google gives this game. In the browser we ask Google for the
openidscope only, so your email address, name and photo never reach us. In the Android app, Android's own sign-in always adds your email address and name to the token it hands over; the server reads only the user id from it and stores nothing else. - If you turn on reminders in the browser: the push address your browser gives us, so the server can send them. The apps schedule reminders on the phone itself.
- To stop mass account creation, a hash of your IP address with a salt that is replaced every day, kept for one day.
What is not stored or shared
No password, no email address (unless you write to us), no analytics, and nothing is sold. Apart from the optional ads below, nothing is shared with third parties. The server runs in the EU (Hetzner, Germany). Server logs keep the request path, status and account id for troubleshooting.
Ads
After a long time away or a finished expedition, you can choose to watch an ad to double that reward, a few times a day. Ads only play when you tap to watch one. They come from Google: AdMob in the Android and iOS apps, and Google's ads for web games in the browser. When an ad loads, Google receives data such as your IP address, device and browser details, an advertising identifier and how you interact with the ad, as described in how Google uses information from sites or apps that use its services. In the EU and UK you are asked for consent first, and you can refuse; ads may then be less personal. Our server only stores how many rewards you doubled today and the last reward you can still double, never anything about the ads themselves.
Deleting your data
In the game (browser or app), open MORE → ONLINE → DELETE. Your account, cloud save, battles, friends and Google link are removed from the server straight away. Nightly backups that may still contain them are deleted after 14 days. The copy on your device goes when you clear the site data or uninstall the app. Without access to the game, write to the contact address below with your friend code and we delete the account by hand.
Contact
Questions or requests: support@flametale.dev. If you write to us, we keep your email only to answer you.