Privacy Policy

When you buy: your name, email address, and the phone number or player details a product asks for. We record what you ordered, what you paid, when, and which payment method confirmed it.

When you sign in: your email address, and — if you use Google sign-in — the name and profile picture Google gives us. We never see your Google password.

Automatically: your IP address, approximate country, browser type and the pages you visit. This keeps the site working, powers security features such as rate limiting, and helps us spot fraud.

What we never store: card numbers or wallet keys. Payments are handled entirely by the payment provider you choose at checkout.

To deliver your order and its codes, to answer your questions, to keep your order history available to you, to prevent fraud and abuse, and to meet tax and record-keeping obligations. If you have asked for our newsletter, to send it — nothing else is ever sent without your consent.

We use a small number of first-party cookies: one that keeps you signed in, and ones that remember preferences such as your theme. We do not use third-party advertising cookies. If we ever enable an analytics or advertising pixel (such as Meta Pixel), it runs only on the public shop pages and never on pages carrying secrets.

Payment providers (such as Binance Pay), so your payment can be taken and verified. Our email provider, so your codes and receipts reach you. Cloudflare, which sits in front of the site for security and performance and processes visitor IPs on our behalf. Game top-up suppliers receive only the player details needed to credit your game account. Nobody else.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Order and payment records are kept for as long as tax and accounting law requires. Everything else is kept while your account is open. Close your account and we delete what we are not legally obliged to keep.

Wherever you live, you can: see and edit your details in your account; ask for a copy of the personal information we hold about you; ask us to correct it; and ask us to delete it (we will, except records the law makes us keep). Unsubscribe from the newsletter with the link in any newsletter email.

If you are a resident of California or another U.S. state with a consumer privacy law (CCPA/CPRA and similar), these are the rights those laws give you — to know, to access, to correct, to delete, and to not be discriminated against for exercising them. Since we do not sell or share personal information for advertising, there is nothing to opt out of. To exercise any right, contact support or email [email protected]; we respond within the time the law allows (45 days for CCPA requests).

We are a U.S. company and our servers may be located in the United States or other countries. Wherever your data is processed, it is protected by the measures described in this policy.

The site is served over HTTPS. Passwords are stored hashed and can never be read back — not by us either. Sign-in and payment endpoints are rate-limited, and delivered codes are encrypted at rest. You can add two-factor authentication or a passkey in your account security settings, and we recommend you do.

The shop is not directed to children under 13, and we do not knowingly collect personal information from them (COPPA). If you believe a child under 13 has given us their details, tell us and we will delete them promptly.

If this policy changes, the new version appears here with a new date at the top. A change that meaningfully reduces your rights will be announced on the site before it takes effect.

Privacy questions and requests: email [email protected] or message t.me/flashtopupllc.