Privacy Policy

Effective: 26 April 2026 · Last updated: 20 August 2026

This Privacy Policy explains how FLATMAP SRL ("FLATMAP", "we", "us", "our") collects, uses, and shares personal data when you use Atlas League (the "App") and this website. FLATMAP SRL is a company organised under the laws of Belgium. Each topic-specific app we publish on the Apple App Store and Google Play is governed by this same Privacy Policy.

If you have questions, contact us at contact@flatmap.be.

1. Who we are

FLATMAP SRL is the data controller for personal data processed through the App and this website.

• Entity: FLATMAP SRL
• Country: Belgium
• Contact: contact@flatmap.be

2. What data we collect

2.1 Account data

• Firebase user ID (assigned automatically when you create an anonymous or linked account).
• Email address (only if you choose to link an email, Google, or Apple account).
• Username you choose.

2.2 Gameplay data

• ELO rating, current division, lives counter.
• Session results (questions answered, correctness, ELO change).
• Answered-question history used to avoid repeating questions and to match difficulty.
• Weekly leaderboard rank.

2.3 Device and technical data

• Push token (Firebase Cloud Messaging / APNs), only if you enable notifications.
• App version, OS version, device model, locale.
• Platform device identifiers (e.g. identifier for vendor on iOS).

2.4 Crash, diagnostic and analytics data

• Stack traces, crash logs, and diagnostic events captured by Firebase Crashlytics.
• Pseudonymous product-analytics events (screens viewed, features used) captured by PostHog.

2.5 Purchase data

• App Store and Google Play receipts validated through RevenueCat.
• RevenueCat subscriber attributes. We do not see or store payment-card data — Apple and Google process all payments directly.

2.6 Advertising data

• Rewarded-ad impression and reward events from Google Mobile Ads (AdMob).
• Advertising identifier (IDFA on iOS, advertising ID on Android), only if you grant the relevant tracking or ads permission on your device.

2.7 Website data

• If you accept analytics cookies on this website, Google Analytics collects page views and device metadata. If you decline, no analytics cookies are set.

3. How we use your data

• To create and operate your account and let you play the game (account data, gameplay data).
• To rank players and operate weekly leaderboards (gameplay data).
• To send timely push notifications (e.g. when your lives are full) — only if you opt in (push token).
• To process and validate in-app purchases and subscriptions (purchase data).
• To detect bugs and crashes and improve the App (crash, diagnostic and analytics data).
• To serve rewarded ads and grant in-game rewards (advertising data).
• To measure how this website is used (website data, with your consent).
• To prevent fraud, cheating, and abuse (all categories, as needed).

4. Legal bases (GDPR Article 6)

• Performance of contract — account, gameplay, and purchase data are processed to provide the service you signed up for.
• Legitimate interest — diagnostic, crash, and basic product-analytics data are processed to keep the App stable and secure and to detect abuse.
• Consent — advertising-identifier-based ad tracking, push notifications, and website analytics cookies are processed only with your explicit consent. You may withdraw consent at any time in your device settings or via the cookie banner on this site.

5. Third-party processors

We share data with the following processors strictly for the purposes listed above:

We do not sell your personal data, share it with data brokers, or use it for cross-app or cross-site behavioural advertising beyond the rewarded ads served inside the App.

6. Retention

We retain your personal data for as long as your account is active. When you delete your account from inside the App (Profile → Settings → Delete Account, see the account deletion page) we delete your account data, gameplay history, and leaderboard entries within 30 days. Aggregated, anonymised analytics may be retained beyond that period.

7. Your rights (EU/EEA/UK)

If you live in the EU, EEA, or the UK, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate personal data.
• Erasure — request deletion of your personal data. You can do this directly in the App or by emailing us.
• Restriction — request that we limit processing in certain cases.
• Portability — receive your personal data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdrawal of consent — at any time, without affecting the lawfulness of prior processing.
• Complaint — lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be) or your local supervisory authority.

To exercise any of these rights, contact contact@flatmap.be.

8. Your rights (California — CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose (see Section 2).
• Request deletion of your personal information.
• Opt out of the sale or sharing of your personal information — we do not sell or share your personal information as those terms are defined under CCPA/CPRA.
• Non-discrimination for exercising your rights.

We have not sold any personal information in the preceding 12 months.

9. Children

The App is not directed to children under 13 (United States) or under 16 (European Union). We do not knowingly collect personal data from children under those ages. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International transfers

Some of our processors (Google, RevenueCat) are based in the United States. Where personal data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards put in place by those processors. PostHog data is hosted in the EU.

11. Security

We use industry-standard security measures, including TLS for data in transit and our processors' encrypted-at-rest storage. No system is perfectly secure; if we discover a breach affecting your personal data we will notify you and the competent authorities as required by law.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective" date at the top will reflect the latest version. Material changes will also be flagged in the App.

13. Contact

FLATMAP SRL · Belgium · contact@flatmap.be