EFFECTIVE SEPTEMBER 4, 2026

Privacy across
the entire Vault.

This is the website-wide Privacy Policy for The Flins App Vault, LLC. It explains the information practices that apply across this website. Each game and service also has a clearly listed product-specific notice covering the features unique to that experience.

PRODUCT PRIVACY DIRECTORY

Choose a game or service.

Snake ReactorApp, Game Center, local progress, and Golden Egg practicesView policy →Fred Myers and the Moonpetal MarshApp, Game Center, local progress, and Golden Egg practicesView policy →Run Fly RunSession-only game and optional Game Center practicesView policy →Boss Man StanConstruction game, local saves, support, and Game Center practicesView policy →Engine Man EricWorkshop progress, Game Center, and Golden Egg Hunt practicesView policy →Golden Egg HuntDiscovery identity, verification, ranking, and public-history practicesView policy →

1. Scope and operator

The Flins App Vault, LLC. (“The Flins,” “we,” “us,” or “Operator”) operates this website, its public pages, support routes, free browser experiences, and the Golden Egg Hunt. This policy applies to ordinary use of the website. A linked product-specific policy controls where it describes a more specific practice for a particular game or service.

2. Information processed across the website

Ordinary technical information: hosting and security providers may process IP address, browser or device information, requested URL, date and time, response status, and security signals needed to deliver and protect the site.
Communications and Feedback information: if you email support or submit feedback, we receive the category, rating, submitted feedback, information you choose to provide, and technical context necessary to respond.
Security records: bounded logs, rate-limit events, error information, and suspected-abuse signals may be processed to protect visitors, games, accounts, and infrastructure.
Feature-specific information: a game, scavenger hunt, support page, or Golden Egg feature may process additional limited information described in its product-specific policy above.

3. Analytics, advertising, and sales

Optional website analytics load only after the applicable consent choice and are configured to minimize information. We do not use the website for behavioral advertising, sell personal information, or intentionally share personal information for cross-context behavioral advertising. Individual game policies identify whether analytics exist in that product.

4. Cookies and local storage

The website may use cookies or browser storage that are necessary for security, privacy preferences, owner-only access, or continuity of an expressly selected feature. A specific game may store local progress or settings as described in its own policy. Clearing browser data may remove local preferences or unfinished browser-game progress.

5. Public content and leaderboards

Some experiences include optional public leaderboards or verified discovery history. Public presentation is limited to the fields described in the relevant product policy. Do not submit a real name, school, address, contact information, social-media handle, or another person's identifying information as a public name. Pending or declined public-name choices appear as Anonymous where supported.

6. Children and families

Game audiences and features differ. Parents and legal guardians should review the product-specific policy before allowing a child to use an online feature. The website does not ask visitors generally for a birth date, real name, address, phone number, photograph, voice recording, or precise location. The Pokémon Field Academy browser experience has additional adult-supervision, location, retention, and nickname disclosures below.

Pokémon Field Academy privacy details

Adult-operated family activity. An adult must operate the device, supervise play, approve each location request, and ensure that children do not enter real names or contact information.

The experience processes a chosen Trainer nickname, selected town and difficulty band, game subject, randomized quest state, progress, timing, missed answers, score, and adult consent timestamp. Precise coordinates and accuracy readings are used transiently to validate the current checkpoint and are not written to the quest database. The browser stores a random quest identifier so unfinished play can resume.

Public top-five results may show the Trainer nickname, score, completion time, and missed-answer count. Unfinished quests become eligible for deletion after 30 days; completed leaderboard records and feedback become eligible after 12 months. Location access may be denied or revoked, but location-based play will not function without it.

This fan-made educational activity is not affiliated with Nintendo, The Pokémon Company, Niantic, any city, or any park authority.

7. Service providers and disclosures

Information may be processed by infrastructure, hosting, content-delivery, security, database, platform-authentication, narration, and support providers only as needed for the selected service. We may disclose information to comply with valid legal process, protect safety or rights, investigate fraud or security incidents, enforce applicable terms, or complete a lawful business transaction subject to appropriate safeguards.

8. Retention and deletion

Retention depends on the feature and is described in the relevant product policy. We keep information only for legitimate operational, security, historical-integrity, support, or legal purposes. A valid deletion request may result in deletion, deidentification, or anonymization where appropriate and permitted by law. Security and provider logs may follow separate limited schedules.

9. Security

We use HTTPS, restrictive browser protections, request validation, bounded inputs, non-guessable identifiers, authentication, rate limits, data minimization, dependency review, and other safeguards appropriate to the feature. No online system can guarantee absolute security. Please report a suspected vulnerability without accessing, changing, downloading, or retaining another person's information.

10. Your choices and rights

You may decline optional analytics, avoid optional public-name features, revoke browser permissions, clear local browser data, or stop using an online feature. Depending on applicable law, you may request access, correction, deletion, restriction, objection, appeal, or other privacy rights. We may need sufficient information to verify the request and protect other users.

11. Changes and contact

We may update this policy or a product notice when features, providers, or legal obligations change. Material changes receive a revised effective date and any notice required by law. Contact theflinsappvaultllc@gmail.com with “Privacy Request” in the subject line. Do not email passwords, platform credentials, signing keys, precise coordinates, or unnecessary information about a child.

This policy is an operational privacy notice and not legal advice. Qualified counsel should review child-directed features, location processing, platform identities, promotions, and regional privacy requirements before broad public launch.