Privacy Policy

Effective date: 22 September 2026

This notice covers aquaflash.co.uk and the Aqua Flash game for Android and iPhone (Android package: com.aquaflash.game). Peter Newing, United Kingdom, is responsible for the personal information described here. Contact taptopaycrypto@gmail.com.

A quick guide for children

Your progress is saved on your device. Solo play does not need an online racing room. If you choose multiplayer, people in your room can see your nickname and your race. Use a made-up nickname: never include your real name, school, address or contact details. Ask a parent or carer for help with online play or privacy questions.

What the game uses

• On your device: progress, race records, upgrades, settings, multiplayer nickname and server preference. The website uses browser storage to save game data and cache game files. No registered player account is required.
• Optional multiplayer: nickname, room membership, boat and upgrades, race inputs and results, connection timing and a temporary reconnect token. Relevant race information is visible to other people in your room. The server receives your network connection, including your IP address through its hosting infrastructure.
• Website delivery: our host IONOS processes technical access information, including requested pages/files, access time, browser, device and referrer information. Its published Web Hosting notice says visitor data is anonymised on collection and retained for eight weeks.
• Support: your email address and any information you choose to send us. Please avoid sending unnecessary personal information, especially information about children.

Why information is used

We use this information to deliver the game, save your choices, operate and reconnect multiplayer races, respond to support requests, and protect service security. For personal information used in service operation, security and support, we rely on legitimate interests in providing a working, safe game and answering requests, subject to your rights and the particular interests of children. Where a legal obligation requires processing, that obligation is the basis. This notice does not ask for consent to advertising or tracking.

Advertising and tracking

The current game has no advertising, in-app purchases, behavioural advertising, free-text chat or voice chat. Unity Analytics and Unity cloud crash reporting are disabled in the current app configuration. We do not sell personal information. The game does not add advertising cookies; browser storage supports game operation and saves. Hosting providers may process operational information as described here.

Providers and international processing

IONOS hosts this website. Render hosts the default multiplayer service. Google processes email sent to our Gmail support address. These providers process information needed to deliver and protect their services. Apple and Google may separately process app-store downloads, account and diagnostic information under their own notices.

Providers may process information outside the United Kingdom, including in the United States. Render describes its international-transfer arrangements in its privacy notice and data processing addendum, including contractual safeguards and applicable Data Privacy Framework arrangements. See also Google’s privacy notice and IONOS’s Web Hosting data notice. Contact us for information about safeguards relevant to your information.

How long information is kept

Local game data stays in your browser or app storage until you remove it. Clearing website data or app storage removes these saves; operating-system backups may retain separate copies. The multiplayer service holds room and race state in memory, rather than a permanent player database. Disconnected members expire after a short reconnect window; empty or expired rooms are removed, and restarting the server clears its in-memory state.

Provider operational logs are separate from room state. IONOS describes an eight-week period for its website visitor data. Render’s log availability depends on the hosting plan; its own security and operational records follow its retention policies. Support correspondence is retained for as long as needed to resolve and follow up your request, handle a related dispute, or meet a legal obligation. Contact us to request deletion of identifiable information still held.

Children and parents

Aqua Flash is suitable for a general audience, including children. Multiplayer is optional. Parents and carers can help children choose non-identifying nicknames and understand what other players see. The current game does not implement age verification or a verified parental-consent process. Parents or carers can contact us about a child’s information. We do not use children’s information for behavioural advertising or profiling.

Your choices and rights

You can play solo, leave an online room, clear local saves, and contact us about information we hold. Depending on the circumstances, UK data-protection law gives you rights to access, correct or delete personal information, restrict processing, object to processing based on legitimate interests, and obtain portable data. Where consent is used, you can withdraw it. We may need limited information to locate records and verify a request; we cannot recover records no longer held.

You may complain to the Information Commissioner’s Office. You do not have to contact us first.

Security and other servers

The website uses HTTPS and the default multiplayer connection uses encrypted WebSockets. No system is completely secure. If you select a custom multiplayer server, its operator is responsible for its processing; check its privacy information before connecting.

Changes and contact

We will update this page when practices change and provide additional notice where required. For privacy questions or requests, email taptopaycrypto@gmail.com.