Real Flag, Fake FlagSeven flags a day. Some real, some invented.

Privacy

Last updated 22 September 2026

There are no accounts here. You never give a name, an email address or a password, and nothing on this site asks you to. What follows is the complete list of what is stored anyway.

In your browser

The game keeps your progress in your own browser's local storage, on your device:

That identifier is not derived from your device, your browser or anything about you — it is a random number. Nobody can look it up and find a person. It exists so that finishing the same edition twice is not counted twice. Clearing site data for this site deletes all of it, including your streak, and there is no way to get it back.

What a finished game sends

When you complete an edition, the game sends one record: which game and which edition date, that random identifier, your score out of seven, and which rounds you got right. If you give the edition a thumbs up or down, that rating is stored the same way — a single plus or minus, with no free-text box anywhere, deliberately.

The server adds an approximate location to that record: a country, and a region such as a state or county, worked out by Cloudflare from the network connection. Your IP address is not stored, here or anywhere else in the system, and the code is tested to keep it that way. Location is never shown back to any player — only in aggregate, privately.

These records exist so I can see how hard an edition turned out to be and how many people played it. They are not sold, not shared with anyone, and not used to build a profile of you.

Moving your streak between devices

If you ask for a transfer code, the site stores a one-way hash of that code, the identifier it hands over, and an expiry fifteen minutes out. The code itself is never stored, and it works once.

Advertising

This site is applying to Google AdSense and does not show ads yet. If and when it does, Google and its partners may set cookies or read device identifiers in your browser to select and measure ads, which is described in Google's advertising policies; you can adjust what Google uses at My Ad Center. In the EEA, the UK and Switzerland you will be asked for consent first, and you can change or withdraw it at any time. Until ads are live, no advertising script runs on this page at all.

Hosting

The site runs on Cloudflare, which processes requests on my behalf and keeps its own short-lived operational logs. The play records described above are stored in a Cloudflare database in the same account.

Children

The game is suitable for all ages, and it collects nothing that identifies anyone, of any age.

Deleting your data

Clearing site data in your browser removes everything held on your device and stops the identifier being used again. To have the server-side records for an identifier deleted as well, mail me from the address at the bottom of this page with that identifier — it is the value stored under rfff:player in this site's local storage — and it will be removed.

Changes

If what the site stores changes, this page changes with it, and the date at the top moves.