Privacy Policy
Last updated: 16 August 2026 · This policy applies to Red Flag Run at playredflagrun.com.
Overview
Red Flag Run is a browser game with no accounts. When you submit a leaderboard score, we send your chosen display name, score, run duration, and a persistent randomly generated device identifier to our leaderboard database hosted by Supabase. We use that identifier to keep one leaderboard entry per device; it is not an email address or sign-in credential. Only the submitted display name and score appear on the public boards. Your hearts, cosmetics, quiz progress, and preferences stay in your own browser via localStorage.
Advertising and cookies
Advertising is not currently enabled. The site does not load Google’s advertising SDK, initialise ad placements or render ad units while that production flag is off. It retains the non-executable AdSense ownership meta tag and the public ads.txt file used to verify the domain.
The game contains a disabled integration for Google AdSense H5 Games Ads. If advertising is enabled after the required account and H5 approvals, the SDK will be scoped to /play; it will not load on the homepage, Field Guide, legal pages, author page or error pages. Before that happens, this policy and the consent flow must be checked against the production configuration.
If that future configuration is enabled:
- Google and its partners may use advertising cookies to serve ads based on prior visits. You can review your options at Google Ads Settings.
- Learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.
- You may opt out of personalised advertising from participating providers via aboutads.info/choices.
Analytics
We use Vercel Analytics and Vercel Speed Insights to understand, in aggregate, how the site performs and which features get used — for example that a run started, a quiz was completed, or a score landed in a coarse band. These measurements are cookieless, anonymised, and not used to identify you or to build a profile of you across other sites. We never sell data.
Consent if advertising is enabled
Before personalised ads are served in the European Economic Area, the United Kingdom or Switzerland, a Google-certified Consent Management Platform must present the required choices. You will be able to change or withdraw that consent through the same mechanism.
Children
Red Flag Run is intended for adults and is not directed to children under 13.
Contact
Questions about this policy? Contact hello@playredflagrun.com.