T-snakes Privacy Policy

Last updated: 2 November 2026

T-snakes ("the game") is operated by Sajid Safi, a sole trader based in Sweden ("we", "us"), who is the controller of your personal data. Contact: support@futureplay.app. This policy explains what data we collect, why, how long we keep it, and your rights. We process personal data under the EU General Data Protection Regulation (GDPR).

1. Who can play

T-snakes is for players aged 13 and over. The game asks you to confirm this the first time you open it. If you say you are younger, online play, voice chat and picture uploads are blocked. We do not knowingly collect data from children under 13. If you believe a child has given us data, contact us and we will delete it.

2. Data we collect

• Account data: a random account ID and a secret token created on your device (the server stores only a hash of the token). If you link a Google account, we receive and store your Google user number, email address and given name. Your name and email are shown only to you, in your Profile.
• Profile data: your nickname, your outfit (including any country flag skin you choose to wear), a built-in avatar, and a picture if you upload one.
• Game data: level, XP, kills, games played, coins, diamonds, items, missions, daily reward progress, settings, scores and rank, a cloud save of your progress, and your time-zone offset (used to reset the daily Kill Road at your local midnight).
• Play time and wallet history: how long you play (in total and per day for the last 30 days), and a history of the changes to your coins, diamonds and items each time your progress is saved to the cloud, with our server's check of whether they were earned or paid for. We use this to keep the game fair (for example to find diamonds that were never earned or paid for) and to fix problems.
• Daily totals: our server also counts, per day, how many players joined, played and came back, and how many games were played on each map. These are numbers only and do not identify you.
• Social data: your friends list, friend requests, friend code, online status shown to friends, your block list, and reports you send or that are made about you.
• Voice chat: your voice while the microphone is on (see section 4). Audio is never recorded or stored.
• Emoji reactions: the reactions you send are passed on to nearby players and are not stored.
• Purchase data: real-money purchases of diamonds through Google Play are not yet available. When they are, we will receive a purchase token and order ID from Google to verify and grant the purchase. We never receive your payment card details. We will update this policy before this starts.
• Technical data: your IP address and basic device and connection information reach our server and our hosting provider when you play. Our own game server uses IP addresses only in memory for rate limits and never writes them to disk or to its logs.
• Advertising data (Android app): Google AdMob may collect your device advertising ID, IP address and device information to show ads (see section 6).
• Support emails: if you email us, we keep your email address, the name shown in your email, your messages and our replies, so we can answer you. Attachments are not kept; we only note their file names and sizes.
• Data stored on your device: your save, settings, sign-in session and a copy of your picture, kept on your phone or in your browser (localStorage). The web version uses no cookies.
• Website visits: futureplay.app counts visits with Cloudflare Web Analytics, which uses no cookies, does not track you across sites and does not identify you.

3. What other players can see

• Anyone, including people who do not play: the public Top 100 list shows nickname, rank, level and XP, coins, games played, this week's coins, outfit, profile level, title, avatar or uploaded picture, and a public player ID that is not your account ID. Weekly winners (place, nickname, coins) are also shown.
• Players in your match: your nickname, outfit (including a flag skin), team and public player ID. Your level and picture are not shown in matches.
• Your friends and recent co-players: your nickname, profile level, picture and public player ID. Friends also see whether you are offline, in the lobby or in a match.
• Private to you: your friend list, requests, block list, coins, diamonds, progress, Google name and email.

Uploaded pictures are served from a public web address with a long random name, so anyone who has the address can open the picture. Pictures are cropped and re-encoded in the app, which removes camera data such as GPS location.

4. Voice chat and the microphone

• The game asks for microphone permission only when you first turn the microphone on in an online match, after a short explanation. You can refuse and still play and listen.
• The microphone is off every time the game starts. It runs only during a live online match while you are alive and the app is on screen. It stops when you die, pause, leave the match or send the app to the background.
• Audio is sent through our game server to other real players near you in the same arena (teammates can hear you from further away). Voice is not peer-to-peer, so other players never receive your IP address.
• Audio is processed in memory and forwarded straight away. We do not record, store, log or analyse it, and no third party receives it.
• The game shows when your microphone is on and how many players can hear you. You can mute everyone, block a player, or report voice abuse at any time.

5. Reports, blocking and moderation

You can report another player's nickname, picture, voice or behaviour, and block players. A report stores the reason, an optional note (up to 140 characters), who sent it, who it is about, the nickname and picture at the time, and where it happened. Reporters are never shown to the player reported. If several different, established players report the same picture, it is hidden automatically until we review it. We may reset or hide names and pictures, mute voice, or ban accounts that break the terms. A ban stores a reason and time. Reports are visible only to us.

6. Ads

The Android app shows ads through Google AdMob, using the Google Mobile Ads SDK and Google's consent tool (UMP). In the EU, UK and Switzerland you are asked for your choice before ads are shown, and ads are personalized only if your choice allows it. You can change your choice any time in the game under Settings > Privacy & ads choices. We limit ads to content suitable for general audiences. The web version does not use an ad network. See Google's policy: https://policies.google.com/technologies/ads

7. Why we use your data and our legal basis

• To provide the game, online matches, voice chat, friends, rankings, cloud saves and sign-in: performing our contract with you.
• To keep the game safe and fair (moderation, anti-cheat, wallet checks, rate limits, abuse prevention, fixing problems), to understand how the game is used (daily totals, website visit counts) and to show leaderboards: our legitimate interest.
• To answer your support emails: our legitimate interest in helping players, and our contract with you.
• To personalize ads where the law requires consent: your consent, which you can withdraw in Settings.
• To process purchases and meet legal duties, once purchases exist: our contract with you and legal obligations.

8. Sharing and processors

We do not sell your personal data. We share data only with service providers that help us run the game:

• Fly.io hosts our game server and database in Stockholm, Sweden. Data is stored on an encrypted volume.
• Google provides sign-in (Android), the AdMob ads and consent tools, and Google Play.
• Cloudflare hosts this website, counts website visits without cookies, receives our support email, and stores encrypted backups of the game data in the EU. The backups are encrypted before they leave our server, and Cloudflare never has the key.
• Supabase stores our support conversations in its database in Stockholm, Sweden, for our own support tool.
• Brevo (France) sends our email replies to you.

We use no analytics, crash-reporting or tracking service of our own. Other players can see the data described in section 3.

9. How long we keep data

• Your account and game data: until you delete your account. Accounts with no activity for 24 months are deleted automatically.
• Uploaded pictures: until you replace the picture, switch to a built-in avatar, or delete your account.
• Reports: open reports until handled; closed reports for 180 days. Reports sent or received by an account are removed when that account is deleted.
• Server logs: up to 7 days. They contain only short, partial player IDs and no nicknames, emails or IP addresses from our game server.
• Admin action log: 12 months.
• Wallet history: 12 months, and removed when you delete your account. Play time is kept with your account.
• Daily totals: kept, because they are numbers only and contain no personal data.
• Support emails: a conversation closes 14 days after our last reply if you do not write again, and is deleted 12 months after it closed. Spam is deleted after 30 days. Encrypted backups of our support tool are kept for 30 days (daily copies) and 12 months (monthly copies).
• Backups: encrypted daily backups of the player database are deleted after 30 days, encrypted monthly backups after 12 months, and hosting snapshots after 5 days. Backups are used only to restore the game after a failure.
• Anti-return record: after an account is deleted we keep only a one-way hash, with no name or game data, so that the deleted account cannot be restored by mistake.
• Voice and emoji reactions: not stored.

10. Your rights

You can request access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent at any time. You can delete your account and data in the game under Profile or Settings > Delete my account, or by emailing support@futureplay.app. See the deletion page for details. You may complain to the Swedish Authority for Privacy Protection (IMY, www.imy.se).

11. International transfers

Our game data is stored in Sweden. Google and our other providers may process some data outside the EU/EEA, for example advertising and sign-in data. Where they do, they rely on safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

12. Security

Data is sent over encrypted connections, stored on an encrypted volume, and access to our servers is restricted. Account tokens are stored only as hashes. No system is completely secure.

13. Changes

We may update this policy. The date at the top shows the latest version. We will tell players in the game about important changes.

14. Contact

Sajid Safi, Sweden. Email: support@futureplay.app