This is an English translation provided for convenience. The binding version is the Polish one: Polityka prywatności i plików cookies. In case of any discrepancy, the Polish version prevails.
Privacy and cookie policy
Flock Attack · effective from September 28, 2026
In short: the game uses only essential cookies and browser storage — to keep you logged in, remember your settings and return you to a game after a disconnect. We do not use analytics or advertising cookies, we do not track you and we do not sell data. That is why we do not ask for cookie consent — we only inform you about them.
1. Data controller
The data controller is Kamil Perendyk, the creator of Flock Attack (flockattack.com). Contact on all data matters: [email protected].
2. What data we process and why
| Data | Purpose | Legal basis (GDPR) | How long |
|---|---|---|---|
| E-mail address, password (as a hash, never in plain text), nick | Game account and login | contract — Art. 6(1)(b) | until the account is deleted |
| Game statistics, Pass progress, rewards, appearance, friends list | Running the game, rankings, the season | contract — Art. 6(1)(b) | until the account is deleted |
| Technical errors from the browser (error text, code file and line, browser name and version) — without nick, account or IP address | Detecting and fixing game failures (e.g. a black screen) | legitimate interest — Art. 6(1)(f) | in server logs, deleted automatically by the hosting provider |
| Match history (mode, difficulty, wave, result, time, heroes and their kills/deaths) | Aggregate statistics for the staff: game balance and which modes and characters are chosen | legitimate interest — Art. 6(1)(f) | until the game is shut down; after the account is deleted the entry is no longer linked to any account |
| Login sessions: IP address, browser (user agent), login time | Account security, protection against abuse | legitimate interest — Art. 6(1)(f) | until the session expires (30 days) or you log out |
| Chat messages | In-game chat | contract — Art. 6(1)(b) | only in server memory, the last 60 messages, until the server restarts |
| Reports from the “Contact us” tab (category, text, staff reply) | Handling ideas and bugs, replying in the game | legitimate interest — Art. 6(1)(f) | until the account is deleted |
| Account bans and the log of staff actions | Enforcing the game rules | legitimate interest — Art. 6(1)(f) | until the account is deleted, the log for up to 3 years |
| Premium Pass purchases: account identifier, amount, date, payment status | Performing the purchase, complaints, tax settlements | contract and legal obligation — Art. 6(1)(b) and (c) | 5 years from the end of the tax year |
| Server logs (IP address, request address, time) | Server operation and security | legitimate interest — Art. 6(1)(f) | according to the hosting provider's settings, usually around two weeks |
3. Who we share data with
- Render Services, Inc. — hosting of the game server and database (servers in Frankfurt, EU).
- Stripe Payments Europe Ltd. — handling payments for the Premium Pass and voluntary support. You provide card and payment details directly to Stripe; we never see them. Policy: stripe.com/privacy.
- Links to Discord and the partner's website are plain links — nothing is shared with them unless you click them yourself.
The game does not load scripts, fonts or images from external servers. We do not sell data or share it with advertisers.
4. Cookies and browser storage
All of the following are essential for the game to work (Article 399(3) of the Polish Electronic Communications Law) — they do not require consent. You can delete them in your browser settings, but you will then be logged out and your settings will return to defaults.
| Name | Type | What for | How long |
|---|---|---|---|
fa_session | cookie (HttpOnly, not accessible to scripts) | Keeping you logged in | 30 days or until you log out |
flockKey | browser storage | Player identifier for this browser (returning to your character) | until the browser data is cleared |
flockNick | browser storage | Remembering the nick you entered | until the browser data is cleared |
flockRoom | browser storage | Returning to an ongoing game after a disconnect | until the game ends |
flockTylkoPc | current tab storage | Remembering that you closed the “this game only works on a computer” message on a phone or tablet | until the tab is closed |
faOdzyskObrazu | current tab storage | Timestamp of the last automatic refresh after a display failure (so it does not refresh in a loop) | until the tab is closed |
flockSet | browser storage | Settings: volume, graphics quality, other players' trails | until the browser data is cleared |
flockTutorialDoneV1 | browser storage | Remembering that you completed the tutorial (the “Replay tutorial” button) | until the browser data is cleared |
flockJezyk | browser storage | The chosen game language (Polish or English) | until the browser data is cleared |
flockToken | browser storage or current tab only | Login with the older method (in the tab — without “Remember me”) | until you log out (in the tab — until it is closed) |
flockCookieInfo | browser storage | Remembering that you closed this notice | until the browser data is cleared |
The Stripe payment page (checkout.stripe.com) runs on Stripe's domain and uses its own cookies according to Stripe's rules.
When you arrive from a ProfitNexus promotion link, we store the fa-partner marker in the current tab's storage until you sign up, log in or close the tab. For a new account we store the registration source and challenge completion to settle the reward. This mechanism does not share any account data with ProfitNexus.
5. Your rights
You have the right to access your data, rectify it, erase it, restrict processing, data portability and to object to processing based on legitimate interest. To exercise these rights or delete your account, write to the address in section 1. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl).
6. Changes
We will announce significant changes to this policy in the in-game news.