FROGZ › Legal › Privacy Policy
Privacy Policy
Last updated 5 August 2026
FROGZ is a free browser game. This policy explains exactly what we collect, why, who else sees it, and how you get it back or delete it.
1. Who is responsible
FROGZ operates FROGZ at frogz.io and is the data controller for the information described here. For any privacy question, data request or complaint, contact privacy@frogz.io.
2. What we collect
If you play as a guest
Nothing is sent to our servers about you personally. Your level, coins, unlocked cosmetics and settings are written to your own browser's local storage and never leave your device. Clearing your browser data erases them permanently — we cannot recover a guest profile.
If you create an account
| Data | Why we hold it |
|---|---|
| Email address | To sign you in, reset your password and contact you about your account. Never shown to other players. |
| Callsign | Your public name. It is visible to other players in matches, on leaderboards and in friend lists — choose it accordingly. |
| Country | Derived from your IP address so you can appear on country leaderboards. We store the two-letter country code only, never the IP it came from. |
| Game progress | Level, XP, coins, gems, class mastery, owned and equipped cosmetics, settings and achievements. |
| Match history | Mode, result, kills, deaths, captures, score and XP for each match, so your stats and rank are accurate. |
| Friends and blocks | Who you have added as a friend, and who you have blocked or muted. |
| Date of birth | Collected once, as a year and month, to determine whether you must be placed in our under-13 mode. We store the resulting age band, not a full birth date. |
Collected automatically whenever you play
Your IP address reaches our server because that is how the internet works. We use it transiently to look up your country (against an offline table on our own server — your IP is not sent to a geolocation service), to rate-limit abuse, and to enforce regional availability. We do not keep IP addresses in our player database.
Our servers keep short-lived operational logs — errors, room and connection events, match lifecycle — used to keep the game running and to investigate cheating or abuse.
If you buy something
Payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers. We keep only a record that a purchase happened: the Stripe session reference, what was granted, and the amount — required for accounting, refunds and fraud prevention.
3. Advertising
FROGZ is free, and advertising is how it stays free. On frogz.io we show ads supplied by Google AdSense. Google may set cookies or similar identifiers to measure and, where permitted, personalise those ads.
- Under 13, or no consent given: ads are served in non-personalised, child-directed mode. No behavioural profile is built, and no advertising identifier is used to track you across sites.
- 13 or over, with consent: ads may be personalised. You can withdraw consent at any time from the privacy controls in the game's settings, and the change takes effect on your next page load.
- Rewarded ads are always optional. You choose to watch one in exchange for in-game coins; nothing in the game is gated behind watching an ad.
You can review and change Google's own ad settings at adssettings.google.com, and read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.
When you play FROGZ embedded on a games portal such as CrazyGames or Poki, that portal serves the ads under its privacy policy, not ours.
4. Children
We ask for your date of birth once, before you can create an account or see an ad. It is a genuine neutral age screen: we do not suggest an answer and we do not let you retry it to get a different result.
If you are under 13 (or under the digital-consent age in your country, which is up to 16 in parts of the EU) FROGZ automatically switches to a restricted mode:
- Ads are non-personalised and child-directed only.
- Real-money purchases are unavailable — the store's money surfaces are hidden entirely.
- No behavioural advertising profile is created.
We do not knowingly collect personal information from children beyond what is listed above as necessary to run the game. If you are a parent or guardian and believe your child has given us information you want removed, email privacy@frogz.io and we will delete the account and its data.
5. Why we are allowed to hold it (legal bases)
| Purpose | Basis under GDPR |
|---|---|
| Running your account and saving your progress | Performance of a contract |
| Anti-cheat, rate limiting, abuse and fraud prevention | Legitimate interests |
| Personalised advertising | Consent — and only from players 13 and over |
| Non-personalised advertising | Legitimate interests in funding a free game |
| Payment records | Legal obligation (accounting and tax) |
6. Who else sees your data
We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We use these processors, each only for the job named:
| Processor | What for |
|---|---|
| Supabase | Account authentication and the player database |
| Stripe | Payment processing |
| Google AdSense | Serving ads on frogz.io |
| Google Fonts | Serving the game's typefaces |
| Our hosting provider | Running the game servers |
We may also disclose data where the law requires it, or to protect the safety of players.
7. Where your data is held
Our processors operate internationally, so your data may be processed outside your own country — including outside the EEA and the UK. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard offered by that processor.
8. How long we keep it
- Account data — until you delete your account, or after 24 months of complete inactivity, whichever comes first.
- Match history — kept while your account exists, because it is your stats.
- Operational logs — a short rolling window, then discarded.
- Payment records — as long as accounting and tax law requires, typically several years, even after account deletion.
- Moderation records (reports, bans) — kept while needed to keep the game safe, so that a banned account cannot simply be recreated.
9. Your rights
Whatever country you are in, you can:
- See and export your data — Settings → Privacy → Download my data returns everything we hold about you as a JSON file, immediately.
- Delete your account — Settings → Privacy → Delete my account. This is irreversible: your profile, progress, match history, friendships and cosmetics are erased, and any gems or purchases are forfeited.
- Correct your data — change your callsign and settings in-game; email us for anything you cannot reach.
- Withdraw ad consent — Settings → Privacy, at any time.
- Object or complain — write to privacy@frogz.io. If you are in the EEA or UK you also have the right to complain to your national data-protection authority.
If you are a California resident, you additionally have the right to know what we collect, to delete it, and not to be discriminated against for exercising either. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.
10. Security
Traffic to frogz.io is encrypted with TLS. Passwords are hashed by our authentication provider and are never visible to us. The game server is authoritative over all progress and currency, so your balances cannot be altered from a modified client. No system is perfect; if you find a vulnerability, please report it to support@frogz.io rather than disclosing it publicly.
11. Changes
If we change this policy materially we will update the date at the top and show a notice in the game before the change takes effect. Continuing to play afterwards means you accept the updated policy.
12. Contact
Privacy: privacy@frogz.io
Everything else: support@frogz.io