THE SMALL PRINT
Privacy policy
This policy explains what information Floop handles when you play, why we use it, and how to contact us about privacy.
1. Who operates Floop
Floop is operated by Ian Frost. For privacy questions or requests, contact help@floopcards.co.uk.
2. Information Floop handles
When you create or join an online room, Floop handles the room code, your chosen display name and avatar, connection and readiness state, game state, and the temporary session needed to reconnect you to that room. This is a small, account-free service: Floop does not require an account or password for ordinary play and does not currently use advertising, analytics, or cross-site tracking.
The online service receives technical request information, including a source IP address. Floop does not store the raw IP address in room or game records; it derives a source identifier for rate limits and connection security. Security records contain aggregate control and outcome data and limited connection-close metadata; they are not used to record credentials, request bodies, names, hands, or card contents. Cloudflare, which hosts the service, may also process technical network information as part of delivering requests.
3. Information kept on your device
The web game saves a small resumable-room record and gameplay preferences in your browser. Mobile apps may keep the information needed to restore a room session, your display preferences, and a small prepared avatar image locally on the device. Local solo games stay on your device.
You can remove browser data through your browser settings. You can remove app data using the controls provided by your device.
4. Custom avatars
Where the feature is available, an eligible Floop+ player may upload a custom avatar. Floop checks the file type and dimensions, removes image metadata, and creates a small processed image. The original upload is not retained as the room avatar.
The original upload is not retained by Floop as the room avatar. The service creates a temporary 128×128 WebP image, stores it privately under an opaque identifier, and allows it to be retrieved only for an authorised session in the same room. It is deleted when replaced, when the player leaves, when it expires, or when the room expires. The service has a two-day physical-cleanup backstop, so deletion is not necessarily instantaneous.
Other players in the room may see the display name and avatar you choose to share. Do not upload an image containing information you do not want shown to those players.
5. How information is used
Floop uses information to create and operate rooms, reconnect players, show the game to people in the same room, process optional avatars, prevent abuse, enforce service limits, maintain security, and respond to support or legal requests.
Floop does not sell personal information and does not use it for advertising profiles.
6. Retention
Online rooms, reconnect sessions, and game state are temporary. If every player is offline, a room is normally retained for 24 hours from the final disconnect; after that, the room, reconnect sessions, and associated temporary data are removed. Deliberately leaving removes the right to reconnect.
Operational and security records are kept only for as long as reasonably needed to provide, secure, troubleshoot, and protect the service, or to meet legal obligations.
7. Your choices and rights
You can choose what display name, standard avatar, and optional custom avatar to use, and you can choose not to display custom avatars on your device. Depending on where you live, applicable law may give you rights to request access, correction, deletion, restriction, portability, or objection, or to complain to a data-protection authority.
To ask a privacy question or make a request, contact help@floopcards.co.uk. We may need enough information to understand and safely respond to the request.
8. Changes
Floop may update this policy as the service changes. The current version will be published on this page.
Last updated: September 2026