Privacy Policy

This Privacy Policy explains how Face Smash (“the App”, “we”, “us”) handles information when you use the App. We built Face Smash to be privacy-respecting: the camera is used purely for on-device head tracking, and we keep the data we collect to the minimum needed to run accounts and multiplayer.

1. Camera & Face Data

Face Smash uses your device's front-facing camera to track your head movements and map them to your in-game 3D avatar. Face detection is performed entirely on your device using Google's ML Kit Face Detection.

• Camera frames are processed in real time, on-device, and are not uploaded to any server.
• We do not store, save, share, or transmit your camera images, video, or facial geometry.
• We do not use the camera for identity verification, biometric authentication, or advertising.
• Camera access requires your permission and can be revoked at any time in your device settings. The game can still be played with touch controls without camera access.

2. Information We Collect

Account information

You can play anonymously or sign in with Google. Authentication is handled by Firebase Authentication. When you sign in we receive and store:

• Your account email address
• Your display name and/or chosen in-game codename
• Your Google profile photo URL (if available)
• A unique account identifier (Firebase UID)

Multiplayer information

When you host or join a local Wi-Fi multiplayer match, your codename, account identifier, control mode, and live game state (such as position and score) are shared with other players on the same local network so the match can run. This information is exchanged between devices to enable gameplay.

Diagnostics & crash data

We use Firebase Crashlytics to collect crash reports and basic diagnostic information (such as device model, operating system version, and the state of the app at the time of a crash). This helps us find and fix bugs. It is not used to identify you personally.

Advertising

Face Smash shows ads served through Google AdMob. To serve and measure ads, Google and its advertising partners may collect and use information such as your advertising ID, IP address, device and app information, and general location, in accordance with their own privacy policies. Where required by law (for example, in the EEA and UK), we use Google's User Messaging Platform (UMP) to ask for your consent before any personalized advertising data is collected.

Managing or revoking ad consent: if you are located in the EEA, UK, or Switzerland, you can review, change, or revoke your consent for personalized ads at any time from within the App via Settings → Privacy & Ads → Manage Ad Consent, which re-opens the consent form.

3. How We Use Information

• To create and manage your account and in-game identity.
• To enable head-tracking controls and gameplay.
• To run local multiplayer matches.
• To diagnose crashes and improve stability and performance.
• To show and measure ads, and to obtain your consent for ads where required.

We do not sell your personal information.

4. Third-Party Services

Face Smash relies on Google Firebase services, which process data under Google's privacy practices:

• Firebase Authentication — account sign-in
• Firebase Crashlytics — crash and diagnostic reporting
• Google ML Kit Face Detection — on-device head tracking (no data sent to Google)
• Google AdMob & User Messaging Platform — ad serving, measurement, and consent management

You can review Google's privacy policy at policies.google.com/privacy.

5. Data Retention & Deletion

Account data is retained while your account exists. You can request deletion of your account and associated data at any time by contacting us at the email below. Crash diagnostics are retained according to Firebase Crashlytics' standard retention period. Camera and face data are never retained, as they are processed only in memory on your device.

6. Children's Privacy

Face Smash is not directed to children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Security

We rely on industry-standard security provided by Google Firebase to protect account data in transit and at rest. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Continued use of the App after changes take effect constitutes acceptance of the revised policy.