Privacy Policy

Last updated: June 4, 2026

Quick Summary

Fnaffreddy.io collects minimal personal data to operate the site and serve ads. We do not sell your personal information for monetary compensation. You have full rights to access, correct, or delete your data. This policy applies to all visitors regardless of location, including the EU, US, Brazil, Canada, and other jurisdictions.

1. Who We Are

Fnaffreddy.io is an individually operated free-to-play browser gaming website accessible at Fnaffreddy.io. We act as the data controller for personal data collected through this site.

For any privacy-related inquiries, please contact us at [email protected].

Note to EEA/UK residents: This website is operated by an individual rather than a registered legal entity. We nonetheless commit to full compliance with the EU GDPR and UK GDPR where applicable.

2. Who This Platform Is For

Fnaffreddy.io is intended for users who are 13 years of age or older (or the applicable minimum age in your country, whichever is higher).

We do not direct our platform at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not use this platform.

If we become aware that we have inadvertently collected personal information from a user under 13, we will promptly delete it. Parents or guardians who believe their child has submitted personal information should contact us immediately.

Note on jurisdiction-specific age requirements: In some countries (e.g., EU member states), the applicable digital age of consent varies by jurisdiction and may be higher than 13. Users below the applicable minimum age in their country must obtain parental or guardian consent before using this platform.

3. What Data We Collect and Why

All features on this platform are available without registration. We do not request personal data such as your name or email unless you contact us directly.

3.1 Data You Provide Directly

If you contact us directly (e.g., via email or contact form), we may collect:

Name
Email address
Any other information you choose to include in your message

3.2 Data Collected Automatically

Data Type	Purpose	Purpose Legal Basis
Strictly necessary cookies / session IDs	Core platform functionality and security	Legitimate interest
Device type, OS, browser type	Platform compatibility and performance	Legitimate interest
IP address	Security, fraud prevention, geographic region detection	Legitimate interest
Pages visited, session duration, referrer	Traffic analytics and platform improvement	Legitimate interest
Advertising cookies	Ad delivery and measurement	Consent
Analytics cookies	Traffic measurement and platform improvement	Consent

4. Legal Bases for Processing (GDPR — EU / UK / EEA)

For users in the European Union, United Kingdom, and European Economic Area, we process personal data only where we have a lawful basis:

Legitimate interests — platform security, fraud prevention, basic operational analytics
Consent — personalized advertising, non-essential analytics cookies (you may withdraw at any time via our cookie settings)
Legal obligation — compliance with applicable law

You have the right to object to processing based on legitimate interests. Contact us at [email protected] to exercise this right.

5. Cookies and Tracking Technologies

Like most websites, we use cookies — small text files stored on your device. Types of cookies we use:

Type	Purpose	Consent Required?
Strictly necessary	Core website functionality, security, navigation	No
Analytics	Understanding how visitors use the site (e.g., Google Analytics)	Yes
Advertising (non-personalized)	Ads based on page context, not user profile	Consent may be required depending on applicable law and the technologies used.
Advertising (personalized)	Ads tailored to your interests via ad network cookies	Yes
Third-party game cookies	Set by embedded game developers	Yes

When you first visit the site, you will be presented with a cookie consent banner. You can withdraw or change your consent at any time via the Cookie Preferences link in the footer. Where required by applicable law, we obtain consent before placing non-essential cookies or using similar tracking technologies.

We may use consent management tools compatible with Google Consent Mode and the IAB Transparency and Consent Framework (TCF).

Managing Cookies in Your Browser

Chrome: Settings → Privacy and Security → Cookies
Firefox: Settings → Privacy & Security → Cookies and Site Data
Safari: Preferences → Privacy
Edge: Settings → Cookies and site permissions

Ad Preference Opt-Out

US: https://optout.aboutads.info/ (DAA)
EU: https://www.youronlinechoices.eu/ (EDAA)
Global: https://optout.networkadvertising.org/ (NAI)
Google Ads Settings: https://adssettings.google.com/

6. Advertising & Third-Party Ad Partners

Fnaffreddy.io displays advertisements to support the free platform. Ads may be contextual or, where you have given consent, personalized. We do not sell your personal data for monetary compensation.

Certain disclosures of technical identifiers to advertising partners may constitute a "sale", "sharing", or targeted advertising activity under applicable privacy laws, including California privacy legislation.

However, sharing data with advertising partners for targeted advertising may be classified as a "sale" or "sharing" under California law — see Section 11 for your opt-out rights.

We do not serve personalized (behavioral) advertising to users we know to be under the age of 13, consistent with COPPA requirements and Google Ads publisher policies.

We do not knowingly allow interest-based advertising to users under the age of 13 and apply age-appropriate advertising controls where required.

7. Third-Party Games

Some games on this platform may be provided or hosted by third-party developers or distribution platforms. Embedded third-party games may set their own cookies or tracking technologies independently of this site.

We encourage users to review the privacy policies of any third-party game provider before interacting with their content. We will provide a clear notice before you enter an environment where personal data may be collected by a third-party game developer.

Tip: We recommend not using your real name or email address when playing multiplayer games on this site.

8. How We Share Your Data

We share data only in these limited circumstances:

Service providers — companies that help us operate the platform (hosting, analytics) under appropriate contractual obligations
Advertising partners — technical identifiers (IP address, cookie ID) for ad delivery and measurement, subject to your consent
Legal requirements — where required by law, court order, or governmental authority
Aggregated / de-identified data — non-identifiable statistics shared for reporting or research purposes
We never directly sell or rent your personal data to third parties for their own marketing.

9. Data Retention

Data Type	Retention Period
Contact / inquiry data (emails, forms)	Up to 2 years from last contact
Server / access logs (IP, browser data)	Up to 12 months
Analytics data (Google Analytics)	Up to 14 months (Google's default)
Advertising cookies	Per each partner's policy (typically 30–365 days)
Legal compliance data	As required by applicable law

After the applicable retention period, data will be deleted or anonymized.

10. Data Security & International Transfers

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, including HTTPS encryption for all data transmission.

Some third-party partners are based in the United States or other countries outside the EEA. For transfers of EU/EEA personal data to third countries, we rely on: Standard Contractual Clauses (SCCs) approved by the European Commission; UK International Data Transfer Agreements (IDTAs); and adequacy decisions where applicable.

We do not engage in automated decision-making that produces legal or similarly significant effects on users.

11. Your Privacy Rights — EU / EEA / UK (GDPR)

Right	What It Means
Right of access	Request a copy of the personal data we hold about you
Right to rectification	Ask us to correct inaccurate or incomplete data
Right to erasure	Ask us to delete your data ("right to be forgotten")
Right to restriction	Ask us to limit how we process your data
Right to data portability	Receive your data in a structured, machine-readable format
Right to object	Object to processing based on legitimate interests or direct marketing
Right to withdraw consent	Object to processing based on legitimate interests or direct marketing
Right re: automated decisions	Not be subject to decisions made solely by automated processing

To exercise any right, contact us at [email protected]. We will respond within 30 days. EEA residents may also lodge a complaint at edpb.europa.eu. UK residents may contact the ICO at ico.org.uk/make-a-complaint.

12. Your Privacy Rights — United States

California Residents (CCPA / CPRA)

Right to Know — categories and specific pieces of personal information collected in the past 12 months
Right to Delete — request deletion of personal information, subject to certain exceptions
Right to Correct — request correction of inaccurate personal information
Right to Opt-Out — opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising
Right to Limit — we do not collect sensitive personal information as defined by CPRA
Non-Discrimination — we will not discriminate against you for exercising your rights

Do Not Sell or Share My Personal Information: Use a browser with Global Privacy Control (GPC) enabled, or contact us at [email protected].

We will respond within 45 days (extendable by an additional 45 days when reasonably necessary). We do not knowingly sell or share personal information of California residents under 16 years of age.

Category	Collected?	Shared with Third Parties?
Identifiers (IP address, cookie IDs)	Yes	Yes (ad partners)
Internet / network activity	Yes	Yes (ad/analytics partners)
Contact information (name, email)	Only if provided by user	No
Geolocation (general, via IP)	Yes	Yes (ad partners)
Sensitive personal information	No	No
Financial data	No	No

Other US State Residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with comprehensive privacy laws have similar rights. Please contact us at [email protected] to exercise them.

13. COPPA Compliance (United States)

COPPA Notice

Fnaffreddy.io is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

We comply with COPPA by:

Not targeting our platform, content, or advertising at children under 13
Not knowingly collecting, using, or disclosing personal information from children under 13
Applying age-appropriate advertising settings with advertising partners where applicable, including disabling interest-based advertising when required
Promptly deleting any personal information collected from a child under 13 if we become aware of it

If you are a parent or guardian and believe your child under 13 has provided personal information to us, please contact us at [email protected] and we will promptly delete it.

14. Other Jurisdictions

Users in countries with applicable privacy laws also have rights with respect to their personal data, including:

Jurisdiction / Law	Key Rights Available
Brazil — LGPD	Access, correction, anonymization, portability, deletion, information about third-party sharing. Children/minors may require parental authorization.
Canada — PIPEDA	Access to and correction of personal information; withdrawal of consent
Australia — Privacy Act 1988	Access, correction, and complaint rights
South Africa — POPIA	Access, correction, and complaint rights
Thailand — PDPA	Access, correction, deletion, restriction, portability, and objection rights
India — DPDP	Access, correction, grievance redressal rights
Japan — APPI	Disclosure, correction, deletion, and suspension of use rights

To exercise rights in any jurisdiction, contact us at [email protected].

15. Third-Party Links & External Sites

Our platform may contain links to external websites. Once you leave this site, this Privacy Policy no longer applies. We are not responsible for the privacy practices of third-party sites. We recommend reviewing the privacy policy of any external site you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do:

We will update the "Last updated" date at the top of this page
For material changes, we will provide a prominent notice on the website for at least 30 days

Your continued use of the platform after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

17. Contact Us

Data Controller Contact

Website: Fnaffreddy.io
Email: [email protected]

We aim to respond to all privacy requests within 30 days (GDPR) or 45 days (CCPA). EEA/UK residents also have the right to contact your national supervisory authority.

This Privacy Policy applies to Fnaffreddy.io and was prepared with reference to GDPR (EU), UK GDPR, COPPA (US), CCPA/CPRA (California), LGPD (Brazil), PIPEDA (Canada), POPIA (South Africa), PDPA (Thailand), DPDP (India), APPI (Japan), and Google Ads publisher policies.