Privacy Policies
Each app handles data differently, so each one has its own policy rather than a single document that would have to hedge. Pick the app you are using.
Bluffer
Last updated 11 October 2026No account and no sign-in, and a round makes no network request at all. Player names stay on your device. Anonymous usage analytics only, no advertising and no IDFA, and the tutorial answers are shared solely if you tick the box.
Read the Bluffer policy
FaceFlash
Last updated 14 October 2026No accounts, no ads, no cross-app tracking. Contact photos, notes and quiz progress stay on your device — or in your own private iCloud if you turn on sync. Anonymous usage counts only, and you can switch them off.
Read the FaceFlash policy
AddFace2Contact
Last updated 8 October 2026Contacts and photos are never uploaded, and there is no account. The only things that leave your device are the search term you type and anonymous usage events.
Read the AddFace2Contact policyThis website
Separate from the apps: here is everything vulander.net itself does with data.
No cookies, no analytics, no tracking
The site sets no cookies of its own, runs no analytics or advertising scripts, and does not track you across other websites. Pages are plain HTML and CSS with a small amount of JavaScript for the forms and voting boards.
The support form
Messages sent from the Support & Contact page reach our inbox through a form-delivery service, which handles the name, email address and message in transit. We use the message only to answer you. Nothing is added to a mailing list, and nothing is sold or shared.
The feature boards
Votes and suggestions on each app's feature board are kept in our hosted database. To stop one person voting repeatedly we store a salted SHA-256 hash of your IP address against the feature you voted for — never the address itself, and never anything that identifies you. Suggestions are reviewed before they appear publicly.
Spam protection
Forms are protected by a privacy-focused alternative to a CAPTCHA, and by a hidden field that only an automated submitter would fill in.
Hosting
Like any internet service, our host processes the connection data inherent in an HTTPS request — your IP address, timestamp and user agent — for delivery and abuse prevention. We do not use that data for analytics or profiling.
Privacy requests
To ask what we hold, or to have it corrected or deleted, email david@vulander.net or use the support form with the “Privacy request” topic. We respond within 30 days.
Data controller: VULANDER.NET PTE. LTD., 22 Sin Ming Lane, #06-76 Midview City, Singapore 573969 · UEN 202639834K. Each app's own policy sets out the rights that apply to it in full.