1About this document
This policy explains what personal data we receive when you play Fly Angels, use the @GameFlyAngelsBot bot and the website https://flyangels.online/, why we need it, how long we keep it, who we share it with and how you can control it.
The policy follows Russian Federal Law No. 152-FZ "On Personal Data" of 27.07.2006 and widely accepted data protection principles, including the GDPR: we collect only what the game needs, we say why, and we do not sell data.
Data controller (operator): the Fly Angels game administration ("we", "the Operator").
The policy covers:
- the Fly Angels game in Telegram (Mini App, the Play button in the bot) and in a web browser;
- the Telegram bot @GameFlyAngelsBot;
- the website https://flyangels.online/.
2In short
- To play through Telegram you do not fill in anything: Telegram gives us your ID, name, username and language.
- We never receive or store payment card details.
- The website has no ads, analytics or tracking counters. It only stores your settings (music, colour mode, the closed storage notice) in your browser.
- We do not sell data and do not share it with ad networks.
- To delete your data, get a copy or ask a question, contact support in @GameFlyAngelsBot (the /support command).
3What data we process
3.1 Data from Telegram
When you open the game in Telegram or write to the bot, Telegram sends us:
- your Telegram ID (a numeric account identifier);
- your first and last name as shown in your Telegram profile;
- your username (if you have one);
- your Telegram interface language;
- the link tag you came with (for example, a friend's invite code).
We verify this data with Telegram's signature. We do not receive your phone number, contacts or Telegram chats, except the messages you send to the bot yourself. Other fields Telegram may pass (such as a profile photo link) are not stored.
3.2 Browser account
If you sign up on the browser login page, you enter a login, a password, an e-mail and a phone number. The password is stored only as a cryptographic hash and cannot be recovered from it. If sign-up was opened through a partner link, we store that link's code.
A Telegram account and a browser account are two separate accounts; we do not link them.
3.3 Game data
- your internal game account number and its creation date;
- characters: name, class, level, power, VIP level, items, currency, progress, guild, friends;
- in-game chat messages and in-game mail;
- logs of logins and in-game actions;
- rule violations and restrictions applied.
3.4 Purchases
When you place an order we store: the order number, the item, the price, the amount and currency of the payment, the payment method, status and time, the character who receives the purchase, your Telegram ID or account login, the IP address the order was created from, your language, and the payment ID and payer details returned by the payment service.
We never receive payment card details (number, expiry date, CVC). Payment takes place on the side of Telegram or another payment service.
3.5 Support
The messages and attachments (for example, payment receipt screenshots) you send to support, and our replies. To help faster, the support agent sees your game account and character.
3.6 Bot
The date of your first and last contact with the bot, daily bonus claims (days and streak), reminder settings, friend invites (who invited whom, the friend's hero level, reward status).
3.7 Technical data
- IP address, date and time of the request, page address, browser and device type (User-Agent) in web server logs;
- when you enter the game, the IP address is logged together with the account number in the game connection protection log. We need this to stop attacks and detect abuse (for example, fake invites).
3.8 Loading screen music diagnostics
The game loading screen may send at most two short technical reports on whether the music could start: browser type (User-Agent), connection type and speed, Telegram platform and version, screen size, playback error codes, time to first sound. The report contains no IP address, no account number and no Telegram ID. To protect the server from overload, only a hash of the IP address is counted for a short time; it is not written to the report.
3.9 Browser storage
The website and the game keep a few small technical records in your browser (settings and sign-in data). They are described in detail in the Cookie Policy.
3.10 What we do not collect
We do not collect special categories of data (health, beliefs, opinions and so on), biometrics, geolocation, microphone or camera access, device identifiers (IMEI, MAC address) or passport details. We do not verify identity documents.
4Why we process data and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Create your account, let you into the game, save progress | 3.1, 3.2, 3.3 | performance of our agreement with you (Art. 6(1)(5) of 152-FZ; Art. 6(1)(b) GDPR) |
| Process and deliver purchases, resolve payment problems | 3.4 | performance of the contract; for payment records also legal obligations (Art. 6(1)(2) of 152-FZ; Art. 6(1)(c) GDPR) |
| Answer support requests | 3.5 and account data | performance of the agreement |
| Bot features: daily bonus, friend invites, reminders | 3.1, 3.6 | performance of the agreement; reminders can be turned off with /remind |
| Game news in the bot (updates, maintenance, events) | 3.1 | our legitimate interest in informing players; you can stop the bot |
| Security, protection against hacking, cheats, fraud and fake invites | 3.3, 3.4, 3.7 | our legitimate interest (Art. 6(1)(7) of 152-FZ; Art. 6(1)(f) GDPR) |
| Fixing technical problems | 3.7, 3.8 | our legitimate interest; 3.8 reports are anonymous |
| Answering lawful requests of authorities, accounting and taxes | as required by law | legal obligation |
If a new purpose ever needs your consent, we will ask for it separately before processing starts.
Automated decisions. We do not make decisions with legal effects for you based solely on automated processing. Automated checks (for example, suspected fake invites) only pause a reward until a person checks it.
5Who sees your data
- Other players see your character name, class, level, guild and your messages in the in-game chat.
- The friend who invited you, if you came through their link, sees your Telegram name and your hero's level until the reward is granted.
- The Operator's staff (admins and support) can access only the data they need for their task.
6Who we share data with
We do not sell personal data and do not share it for advertising. Data is received only by:
- Telegram (Telegram Messenger Inc. and its affiliates): game sign-in, the bot and in-app payments work through Telegram. Telegram processes data under its own privacy policy: https://telegram.org/privacy.
- Cloudflare, Inc. (USA): the delivery and protection network for flyangels.online. Requests to the website, including the IP address and technical headers, pass through Cloudflare.
- Hosting provider 1GSERVERS, LLC (USA): the game, the bot, the website and the databases run on a server rented from this provider. The provider supplies the hardware and does not use the data for its own purposes.
- Payment services you use to pay: they receive order data (number, item, amount). You enter card details only on their side.
- Public authorities, where required by law and on a proper request.
7International transfers
The game servers are located outside Russia (see section 6), and Telegram and Cloudflare also process data abroad. Your data is therefore transferred across borders. We transfer only the data the game needs and choose providers that apply data protection measures.
8How long we keep data
| Data | Retention |
|---|---|
| Account, characters, game data | while the account exists; after deletion at your request, deleted or anonymised within 30 days |
| Bot data (section 3.6) | while you use the bot; deleted on request |
| Support conversations | 3 years after your last request |
| Orders and payments | 5 years after the purchase (accounting, taxes, disputes) |
| Records of violations and refunds | while the account exists |
| Web server and sign-in protection logs (with IP) | up to 6 months |
| Music diagnostics (no IP, no ID) | up to 6 months |
| Backups | data is removed as backups are refreshed, within 90 days at most |
| Browser storage | see the Cookie Policy |
If the law requires longer storage, we keep the data as long as the law requires and only for that purpose.
9How we protect data
- all connections to the website, the game and the bot use HTTPS;
- passwords are stored only as hashes;
- Telegram sign-in is verified with Telegram's cryptographic signature, and sign-in links are single-use and short-lived;
- database access is restricted: service programs get access only to the fields they need;
- secret keys are stored separately from the website and the code;
- staff access is limited and requires confirmed permissions.
If a data breach affects your rights, we will notify you as and when required by law.
10Your rights
You can:
- find out what data about you we process and get a copy;
- correct inaccurate data;
- ask us to delete your data or restrict its processing;
- withdraw consent where processing is based on consent;
- object to processing based on our legitimate interest;
- turn off bot reminders (/remind) or stop the bot;
- complain to Roskomnadzor (https://rkn.gov.ru/) or a court, and if you are in the EU, to your local supervisory authority.
How to contact us. Write to support in @GameFlyAngelsBot: the /support command, the Help → Contact support button, or just any message to the bot.
So that we never give your data to someone else, we check that the request comes from the account owner: for a Telegram account, write from the same Telegram account; for a browser account, give the login and the e-mail or phone used at sign-up.
We reply within 10 working days. If we need more time, the period may be extended by 5 working days and we will tell you why.
Deleting your account. Once deleted, characters, items and purchases cannot be restored. Payment records are kept as long as the law requires (section 8).
11Children
The game is intended for users aged 16 and over. If you are under 18, you may make in-game purchases only with the consent of a parent or legal guardian. We do not knowingly collect data from children under 14 without parental consent. If you are a parent and believe your child gave us data without your consent, contact support and we will delete it.
12Changes
We may update this policy, for example when new features appear. The new version is published on the website with its date. We will also announce significant changes in the bot or in the game.
13Contacts
- Support: Telegram bot @GameFlyAngelsBot, /support command
- Operator: the Fly Angels game administration
If the Russian and English versions differ, the Russian version prevails.
A question about these documents? Write to support: @GameFlyAngelsBot, the /support command.