Privacy

Last updated: 25 October 2026

Pocket Flames is a game by HobbyMatch Ltd. This page explains what the game keeps, what it sends, and what you can do about it. If you have a question, email support@pocketflames.com.

What stays on your phone

Your best heights, unlocked inks, goals, settings, a run in progress if you’re interrupted, the name you type to share (if any), and the ghosts of challenges you’ve opened. These are saved in your browser on your phone so the game works offline. We can’t see them. Deleting the app, or clearing this website’s data in your browser settings, removes them. The game uses no cookies.

What we receive when you share a challenge

When you tap Copy or Share on the challenge screen, the game sends your ghost to our server so your friend’s game can fetch it. A ghost is:

• the sky you flew (a number that makes the same sky),
• the height you reached,
• the path your flame took,
• and the name you typed, if you typed one.

We don’t receive your email, your location, your contacts or anything about your phone. Please use a nickname, not your full name. Names with rude words are left out.

Anyone who has your link or challenge code can open your ghost: that’s how challenges work. Ghosts aren’t listed or searchable anywhere.

How long we keep it

90 days from when you share it. Then it’s deleted automatically. Our database host keeps a short backup history, so a deleted ghost can remain in backups for up to 7 more days.

Why we use it

Only to let your friends play against your ghost. We rely on our legitimate interest in providing the challenge feature you asked for. We never sell it, use it for advertising, or build profiles.

Who else is involved

The game is hosted by Cloudflare, which runs our server and database. Like any web host, Cloudflare handles the internet (IP) address your phone connects from, to deliver the game and protect it from attacks. We use your IP address to stop the server being flooded with requests (a count for one minute), and we don’t store it ourselves. When your phone sends or fetches a ghost, Cloudflare also keeps a technical record of that request for us (the address asked for, which includes the challenge code, the time, and connection details including your IP address) for up to 7 days, so we can find and fix problems. Cloudflare’s privacy policy: cloudflare.com/privacypolicy

Your browser may also send Cloudflare a report if the game fails to load, so Cloudflare can fix network problems.

When you share a challenge, your message goes through whatever app you choose (Messages, WhatsApp, and so on), under that app’s own privacy terms.

Your ghost is stored in Cloudflare’s network, with our database located in Western Europe. Where Cloudflare processes data outside the UK, it does so under safeguards set out in its data processing terms.

Children

Pocket Flames is for all ages. There are no accounts, chat, ads or tracking, and sharing a challenge is always your choice. If you’re a parent or carer and want a ghost deleted, email us its code (below).

Your rights

Under UK data protection law you can ask us for a copy of your data, to correct it, or to delete it, and you can object to how we use it. Because we don’t have accounts, we can only find a ghost by its challenge code.

To delete a ghost: email support@pocketflames.com with its challenge code (it starts with LS-, like LS-K7Q2-MD4X-9P3B-Ana). We’ll delete it within 30 days. Your friend’s phone may keep a copy of a ghost it already opened, and the message you sent stays wherever you sent it.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.

Changes

If we change what the game collects, we’ll update this page and the date at the top.

Who we are

‹ Back to Pocket Flames