Skip to content
FindMyFlag — Reverse Flag Search

Privacy

Privacy without the mystery

FindMyFlag needs enough technical information to run and improve the search service, but it is not designed to build advertising profiles or collect unnecessary personal data.

Identify a flag

Uploaded images

Images you submit are processed only for the purpose of running the visual flag search. FindMyFlag does not use uploaded images to train a general-purpose AI model. Upload handling may involve temporary processing in server memory or temporary files required to complete the search. Uploaded images are not retained as a user photo archive and are not stored after the search processing is complete.

Mobile apps

FindMyFlag is also available as a mobile app for Android and iOS. The mobile apps allow you to take a photo or choose an image from your device for visual flag identification. Camera or photo-picker access is initiated by you, and FindMyFlag does not browse or access other photos on your device.

Images submitted through the mobile apps are used only to perform the requested visual search. Before upload, the app prepares the image for search and removes EXIF and GPS metadata. Uploaded images are not stored after search processing is complete.

The mobile apps send limited anonymous technical information used to operate, secure and monitor the service. This may include app version, input source, anonymous visitor and session identifiers, search activity and related performance events. These FindMyFlag identifiers are not advertising IDs or hardware identifiers.

This technical information is used for app functionality, security, rate limiting, reliability and analytics. FindMyFlag does not use it for advertising, cross-app tracking or user profiling, and does not sell user data.

Android installations distributed through Google Play may use Google Play Integrity to verify that requests originate from a legitimate installation of FindMyFlag. This verification is used for security and abuse prevention.

Technical analytics and service logs

FindMyFlag records limited operational information such as search sessions, search counts or hits, response and load times, and related technical events used to understand reliability and improve performance. The service is not designed to create named user profiles from this information.

Standard web infrastructure may also process network information such as IP addresses, request headers and user-agent information for delivery, security, rate limiting and troubleshooting. Retention may vary by the technical system involved.

Recent identifications

FindMyFlag can display a short list of recent identification activity. This feature records result-level information needed for the feed, such as the selected flag title and source where available. It is not intended to identify the person who performed the search.

Google Analytics and cookies

FindMyFlag may use Google Analytics to understand website usage. Analytics storage is denied by default, and the Google Analytics tag is loaded only after you accept analytics in the consent notice. If you reject analytics, FindMyFlag search remains fully available and FindMyFlag does not intentionally send analytics events to Google Analytics.

If you accept analytics, Google Analytics may set first-party cookies such as _ga and _ga_<container-id> to distinguish users and preserve session state. Your consent choice is stored locally in your browser so FindMyFlag can remember it. You can change or withdraw that choice at any time using Cookie settings in the footer; rejecting analytics disables Analytics for subsequent activity and FindMyFlag attempts to remove its Google Analytics cookies.

Cloudflare Turnstile and abuse protection

Search submissions may be protected by Cloudflare Turnstile and rate limiting. These controls help distinguish normal use from automated abuse and protect the service from excessive traffic. Third-party protection services may process technical information according to their own privacy terms.

Third-party sources

Search results can load images from and link to third-party source websites. When your browser requests third-party content, that source may receive ordinary web-request information and applies its own privacy policy. See Sources for how FindMyFlag uses source material.

Questions

Privacy questions can be sent through the contact form.

Last updated: 19 August 2026. This policy should be updated if the analytics, retention, hosting or contact setup materially changes.