PRIVACY POLICY

Your photos.
Your data.

Updated November 4, 2026 · Operator: yuutarou baba

This policy covers FACE OFF STORY: Photo Fighter on iOS and Android and this support website. Features and advertising settings in test builds may differ from a public release. We update this page when practices change.

1. Camera and face images

The camera is used to generate a fighter from a face photo. From build 4, successful character generation is required before play. Face analysis runs on your device and is not used to authenticate or identify a person. The game does not send character face images to advertising services or its room-signaling database.

During co-op, the character's face image is sent to your partner through an encrypted direct WebRTC connection. Use a photo you have the right to use and are comfortable showing to your partner. From build 4, play cannot start without camera permission and a successful face check. Change camera permissions in system settings.

1.1 Data processed and purpose

The app processes a camera frame, a cropped face image, a face bounding box and head orientation, and eye-distance, mouth-width and eye-to-mouth-distance measurements. On iOS, Apple's Vision framework performs this analysis locally. The measurements are used only to validate a single frontal face, crop its image and select a fictional fighter type and game attributes. They are not used for identification, authentication, real-world personal-trait inference, profiling, model training or advertising.

1.2 Storage, retention and deletion

Camera frames, analysis results and the character face texture are processed in app memory on the device. The game does not write them to a persistent photo file, save file, photo library or cloud database. Analysis results are temporary; only the selected fictional fighter type and the cropped image are needed for play. The current face image can remain in memory while the app is open, including after returning to the title screen. Taking a replacement photo releases the previous image. Closing the app ends this in-memory retention; a new launch requires character generation again. This describes app-level memory lifetimes, not a guarantee of immediate secure overwriting of every operating-system memory buffer.

1.3 Co-op sharing

Only when you choose online co-op, a reduced JPEG copy of your character face is sent directly to the partner device over an encrypted WebRTC data channel. The partner is another user and can see the image. The game does not send the face photo or facial measurements to the developer, Firebase, the STUN service or AdMob, and does not upload them to a server for storage. Firebase stores connection metadata, not face content. The receiving game holds the partner image in memory for the co-op session and releases it when leaving co-op or closing the app. The app does not save or export the received image. Another user may independently take a screenshot or recording; the game cannot remotely delete such copies. Facial measurements are not shared with the partner; the fictional fighter type is shared for gameplay.

2. Co-op connection information

The game uses anonymous identifiers from Google Firebase Authentication and Realtime Database to process room membership, expiry and SDP/ICE connection details. Network communication involves IP addresses, and direct peers may learn each other's IP address.

After connecting or closing a room, the game requests deletion of room data and its anonymous account. Room access expires after 30 minutes; this is not a guarantee of complete data deletion at that time. Failed requests and service logs may have different retention periods. See Firebase privacy information.

3. Advertising

The game uses Google Mobile Ads SDK (AdMob) and consent management. For advertising, measurement and fraud prevention, Google may process IP addresses, approximate location inferred from IP, device or app identifiers, advertising interactions, diagnostics and performance information. Face images are not sent for advertising. Non-personalized ads do not disable all data processing.

Use any consent form presented in your region, available ad privacy controls and your OS advertising or tracking settings to manage choices. Test distributions use Google test ads. See Google's privacy policy and the SDK disclosures for iOS and Android.

4. Support and deletion requests

If you email support, your email address, message and optional attachments are used to reply and investigate. Do not send face photos or confidential information. Contact 99.rockyou@gmail.com with questions about access or deletion of personal data. We will clarify the relevant data and available actions. The game cannot necessarily erase information in your email provider, a partner's device or an external service.

5. Children and safety

Parents should review the age rating, camera access, advertising and co-op partners. Do not publicly share photos or room codes with strangers. The game is not intended to collect face authentication data from children.

6. This website

This page has no photo upload form or custom visitor analytics. GitHub Pages hosting infrastructure may process network logs such as IP addresses for delivery and security. Linked services follow their own policies.