Privacy Policy

Fatty Bird (“we”, “our”, or “the Game”) is a browser-based game. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. By playing the Game or creating an account, you agree to the practices described here.

We collect only what is necessary to run the game:

• Account data: When you sign in via Google or X (Twitter), we receive your public profile name and a unique identifier from that provider. We do not receive your password.
• Username: A username you choose or one auto-generated at sign-up.
• Gameplay data: Your scores, session results, and game orientation (portrait / landscape) used to verify score submissions and maintain the leaderboard.
• Technical data:IP address (logged transiently for abuse prevention), and session tokens stored in your browser’s local storage.

We do not collect your email address, real name, phone number, payment information, or any other personal data beyond what is listed above.

We use OAuth 2.0 to let you sign in with your existing Google or X account. During this flow, the respective provider authenticates you and shares a minimal profile (public display name and a unique ID) with us. We never see your OAuth provider password. The data shared is governed by that provider’s own privacy policy in addition to ours.

• Google Privacy Policy
• X (Twitter) Privacy Policy

• To authenticate you and maintain your game session.
• To record and display your scores on the leaderboard.
• To detect and prevent cheating or abuse.
• To operate and improve the Game.

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

We do not use tracking cookies. Authentication tokens (access token and refresh token) are stored in your browser’s localStorageso your session persists between visits. You can clear these at any time through your browser’s settings. Clearing them will log you out.

Your account and associated scores are retained for as long as your account exists. You may request deletion of your account and data at any time by contacting us (see Section 9). Deleted accounts are permanently removed within 30 days.

The Game is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We use industry-standard measures to protect your data, including HTTPS encryption in transit, hashed token storage, and short-lived access tokens. No system is completely secure, and we cannot guarantee absolute security.

If you have questions about this Privacy Policy or wish to request data deletion, please contact us via our website at fattybird.run

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect any changes. Continued use of the Game after changes constitutes your acceptance of the revised policy.