Overview
Vexillologists.com is an interactive site that allows users to learn and various flags, countries, territories, and people groups around the world. This policy explains what data we collect, why we collect it, and the choices you have. We collect only the information needed to provide and protect the service.
Information We Collect
- Account data - when you create an account, we store your email address, username, and a securely hashed password. If you sign in with Google, we receive the basic profile data needed for authentication.
- Gameplay data - we store quiz progress data such as your high score, games played, and collected/mastered flags so your profile and leaderboard stats persist.
- Session and security data - we use essential cookies and temporary session data to keep you signed in, maintain quiz state, protect forms, and reduce abuse.
- Communication data - if you contact us, we receive the details you choose to include in your message.
Information We Do Not Collect
- We do not sell your personal information.
- We do not collect payment card information.
- We do not run ad tracking or build marketing profiles from your gameplay.
How We Use Your Data
- Provide core features (account access, quiz gameplay, leaderboard, and mastery).
- Secure the service (fraud/spam prevention, login protection, and abuse detection).
- Operate account features (email confirmation, password reset, and support responses).
- Maintain and improve reliability and performance.
Cookies & Local Storage
We use essential cookies required for authentication, security, and quiz/session behavior. We also store your theme preference in local storage so your light/dark setting persists.
Third-Party Services
- Google OAuth - optional sign-in provider used only for account authentication.
- Google reCAPTCHA - used on signup to help prevent automated abuse.
- Email delivery provider - used for account-related emails, i.e. confirmations and resets.
- Infrastructure providers - host and deliver the application and static content securely.
Legal Bases for Processing
Where required by law, we process data based on legitimate interests (operating and securing the site), contract (providing the service you request), consent (where applicable), and legal obligations.
Data Retention & Deletion
Account data is retained while your account is active. You can permanently delete your account and associated profile/game data from the settings page. We may keep limited technical records for security, legal, or abuse-prevention purposes when required.
Security
We use industry-standard safeguards, including password hashing and HTTPS in production, to protect data in transit and at rest.
Your Rights
Depending on your location, you may have rights to access, correct, delete, or restrict certain uses of your personal data. To make a request, contact us and we will respond within a reasonable timeframe.
Changes to This Policy
We may update this Privacy Policy over time. Material changes will be reflected by updating the "Last updated" date on this page.
