privacy policy
Last updated: September 15, 2026
brainrotlabs ("we", "us", "our") makes small browser games and apps at brainrotlabs.in and on app stores. This page explains what information we collect when you use our website and games, how it's used, and the choices you have. We keep it short and honest — we're a tiny studio, not a data broker.
who we are
The site and games are operated by brainrotlabs. If you have any questions about this policy or your data, email us any time at hello@brainrotlabs.com.
what we collect
- Information you give us. If you email us, we receive your email address and whatever you write. We only use it to reply. If you choose to put a score on a game's leaderboard, we receive the name you type for it — see leaderboards below.
- On-device game data. Some games store small bits of data in your browser's local storage — for example, your high score in Striker Rush, or your best distance and motion-control calibration in Just Flap Bro. This stays on your device, isn't sent to us, and you can clear it any time by clearing your browser data.
- Automatically collected data. Like most websites, our hosting and our analytics and advertising partner (Google) may automatically receive standard technical data such as your IP address, device and browser type, and pages viewed, via cookies and similar technologies. See analytics & measurement below for what we do with it.
- App data. Our Android games Granny Off the Meds and Sir Flipsalot collect some data of their own — leaderboard names and scores, and data used by their ads. See granny off the meds and sir flipsalot below.
advertising & cookies
We show ads to help keep our games free — including rewarded video ads in some games (for example, an optional "watch a short ad to continue" prompt). Ads are served by Google and its partners.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our site and/or other sites on the internet.
- You can opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalized ads at aboutads.info or, in the EU, youronlinechoices.eu.
For more on how Google uses data from sites and apps that use its services, see google.com/policies/technologies/partner-sites.
Your consent (EEA, UK & Switzerland). If you're in the European Economic Area, the United Kingdom, or Switzerland, we ask for your consent before serving personalized ads, using a Google-certified consent management platform. You can change or withdraw your choices at any time via the privacy/consent option shown on the site — in Granny Off the Meds under GRAPHICS → AD PRIVACY, and in Sir Flipsalot with the PRIVACY button on the main menu.
player counts
Our web games show a small "players online" counter. To power it we store an anonymous, randomly generated device id in your browser's local storage, plus short session pings while a game is open. We use this only to count how many people are playing a game right now and how many unique devices have ever played it. It contains no name, email, or other personal information, isn't used to track you across other sites, and isn't sold or shared. You can clear it any time by clearing your browser's site data. This counter is separate from the analytics described below.
leaderboards
Just Flap Bro keeps a public top-100 leaderboard for each of its two modes. It is entirely optional: you only ever join it by finishing a run that would place and then choosing to enter a name.
- What we store. The name you type, your score, and the same anonymous device id the player counter already uses — that last one is what reserves the name for you, so nobody else can post under it.
- What is public. The name and the score, shown on the board to anyone who opens it. Nothing else is displayed, and the device id is never shown.
- Please don't use your real name or contact details. Pick something you are happy for strangers to read. We don't ask for an email, a password, or an account.
- Changing your mind. Skip the name and nothing is sent at all. If a name is already up there and you want it taken down, contact us and we will remove the entry.
granny off the meds (android app)
Granny Off the Meds is our Android game on Google Play. This section covers what the app itself does with data; the rest of this policy — advertising, children's privacy, your rights — applies to it too.
- On your phone. The app saves your settings, your local high scores, the name you picked, which granny skins you own, and your sign-in session on the device itself. Uninstalling the app or clearing its data removes all of it.
- Your name and the leaderboard. The first time you play, you pick a username. To put it on the online leaderboard, the app signs you in as a guest — no email or password — or, only if you choose to, with your Google account. We then store your username, your best score in each game mode, your country (read from your phone's language and region setting, not from GPS), and a local area if you type one in. These build the global, national and local boards, and the leaderboard is public: other players can see names, scores, countries and areas. Please don't use your real name. This data is kept with our database and sign-in provider, Supabase, in a data centre in India (AWS Mumbai).
- Signing in with Google. Optional. If you do, Google shares your email address, name and profile picture with our sign-in provider so the app can sign you in and keep your name across devices. Your email address is never shown on the leaderboard and is not used for ads.
- Ads. The only ad in the game is optional: the first time Nana goes down in a run, you can choose to watch a short video to keep going. These ads are served by Google AdMob. Its software in the app collects your device's advertising ID, your IP address (which gives an approximate location), basic device information such as model, operating system and language, how you interact with the ads, and diagnostic data about the ad software. On newer Android versions it may also use Android's Privacy Sandbox advertising features, such as Topics. Google uses this to show, measure and protect ads and — unless you opt out — to personalise them. See how Google uses data from apps that use its services.
- Your ad choices. In the EEA, the UK and Switzerland, the app asks for your consent when you first open it, and you can change your answer any time in the game under GRAPHICS → AD PRIVACY. Wherever you are, you can reset or delete your advertising ID, or opt out of personalised ads, in your phone's settings (usually Settings → Google → Ads, or Settings → Privacy → Ads).
- Purchases. Paid granny skins are bought through Google Play. Google handles the payment; we only learn which items your Google account owns — never your card or payment details.
- What the app doesn't do. It doesn't ask for your location, contacts, camera, microphone or photos, and we don't add a separate analytics tool to it. We don't sell your data.
deleting your granny off the meds account
In the game: tap your name in the top-left corner of the menu to open ACCOUNT, then tap DELETE ACCOUNT twice. It happens straight away, no email needed.
Signed out, or already uninstalled? Email hello@brainrotlabs.com with the subject "Delete my Granny Off the Meds account", and tell us the username you used in the game (and, if you signed in with Google, that Google account's email address). We do it within 30 days and reply to confirm.
- What we delete. Your username, your scores, the country and area stored with them, and your sign-in account. Deleted data can remain in routine database backups for a short time before they are overwritten.
- One exception. Sir Flipsalot uses the same sign-in service. If the same Google sign-in also holds Sir Flipsalot progress, we delete everything from Granny Off the Meds but keep the sign-in itself, so your Sir Flipsalot progress isn't wiped along with it. You can delete that too — see sir flipsalot below.
- What we can't delete for you. Data Google holds — ad data under Google's own retention practices, and your purchase history in Google Play — is managed from your Google account. Data saved on your phone goes when you uninstall the app or clear its data.
sir flipsalot (android app)
Sir Flipsalot is our other Android game on Google Play. It has its own full privacy policy; this is the short version.
- Without signing in. The game is fully playable without an account. Your best score, level, bees, skin and settings are saved on your phone only.
- Signing in with Google. Optional, and only needed for the online leaderboard. Google shares your account identifier and email address. We also store a display name (your Google name, which you can change), your country (from your phone's language and region setting, not GPS), a local area if you type one in, and your progress — best score, level and bees. It is kept with Supabase in a data centre in India (AWS Mumbai), the same provider Granny Off the Meds uses.
- What is public. Your display name, country, area, score and level appear on a public leaderboard. Your email address is never shown.
- Ads. When you lose your last life, the game may offer an optional rewarded video to continue the level. It is served by Google AdMob, which collects the same kinds of data described for Granny Off the Meds above: advertising ID, IP address, device information, ad interactions and diagnostics.
- Your ad choices. Where the law requires it — including the EEA, the UK, Switzerland and certain US states — the game shows Google's consent message, and you can change your choice any time with the PRIVACY button on the main menu.
- What it doesn't do. No purchases, no access to your location, contacts, camera, microphone or photos, and no analytics tools.
- Deleting your data. You can sign out inside the game at any time. To delete your account and leaderboard entry, follow the deletion steps in Sir Flipsalot's privacy policy; it is done within 30 days.
webcam & motion controls
One of our games, Just Flap Bro, can be played with motion controls using your webcam — you flap your arms to fly. This is entirely optional and is never switched on by itself.
- Nothing happens until you ask for it. The camera is only requested after you press "play with camera", and your browser will ask for permission before anything starts. The game is fully playable with a keyboard or touch instead.
- The video never leaves your device. Camera frames are analysed inside your browser by a pose-detection model running on your own computer or phone. We do not upload, transmit, record, store or see any video, still images, or body-position data. Nothing is sent to our servers, because there is nothing to send — the processing happens in the tab.
- Nothing is kept. Frames are discarded as soon as they are analysed. When you close the tab or stop the game, it is all gone. The only thing saved is a handful of numbers describing your neutral posture (so you don't have to sit perfectly straight), which stay in your browser's local storage on your device.
- Third-party downloads. The pose-detection library and its model file are downloaded from public content delivery networks (jsDelivr and Google Cloud Storage) the same way any script or image on the web is. Those providers see the download request, including your IP address, as they would for any file — but they receive no camera data.
- Stopping it. Close the tab, press "main menu", or revoke the camera permission in your browser settings (usually the icon in the address bar). Your device's camera indicator light tells you when the camera is genuinely active.
We don't use the camera for advertising, identification, profiling, or anything other than reading your arm and body movement to control the bird while you play.
analytics & measurement
We use Google Analytics and the Google tag to understand how people find and use the site — which games get opened, which pages get read, and whether our ads bring in players who actually stay. This helps us decide what to build next and where to spend a small advertising budget.
- What's measured. Pages viewed, approximate location (country/region level), device and browser type, how you arrived (search, an ad, a link, or directly), clicks on links such as "play now" and Google Play, and roughly how long a game page stays open.
- What isn't. We don't collect your name, email, or account details through analytics, we don't upload your email address to Google for ad matching, and we don't sell or share this data. Google's tag stores cookies on your device to tell repeat visits apart.
- Conversions. When you do something we care about — opening a game and playing for a while, tapping through to Google Play, or emailing us — that action is counted as a "conversion" so we can tell which ads and pages actually work. It's counted as an anonymous event, not tied to you as a person.
- You can opt out of Google Analytics on every site you visit with the Google Analytics opt-out browser add-on, or block analytics cookies in your browser settings.
If you're in the European Economic Area, the UK, or Switzerland, analytics and advertising cookies are switched off by default until you consent — Google's consent mode is enabled on this site, so before consent we receive only anonymous, cookieless measurement.
links to other services
Our site links to third-party platforms such as Google Play and app stores where some of our games live. Those services have their own privacy policies, and this policy does not cover them.
children's privacy
Our games are made for a general audience and are not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us and we'll remove it.
data retention & security
We keep email correspondence only as long as needed to help you. Leaderboard names and scores are kept until you delete them or ask us to — for Granny Off the Meds, see deleting your account, and for Sir Flipsalot, sir flipsalot. Advertising data is handled by Google under its own retention practices. We use reasonable measures to protect information, but no method of transmission over the internet is 100% secure.
your rights
Depending on where you live (for example under the GDPR or UK GDPR), you may have the right to access, correct, or delete personal data we hold about you, and to object to or restrict certain processing. To make a request, email hello@brainrotlabs.com and we'll respond within a reasonable time.
changes to this policy
We may update this policy as our games and services evolve. When we do, we'll change the "Last updated" date above. Significant changes may be highlighted on the site.
contact
Questions, requests, or confessions? Reach us at hello@brainrotlabs.com.