Privacy policy
The shortest honest version: Flickloot collects an email address if an account is created, and a record of gameplay. It has no payment data, because it takes no payments. It sells nothing to anyone.
What is collected
| Without an account | Nothing that identifies a person. Game state is held in the browser and is lost on reload. An approximate location may be derived from the connection in order to apply jurisdictional blocks; it is not stored. |
|---|---|
| With an account | An email address. A password, stored only as a cryptographic hash. Gameplay records — spins, stakes, outcomes, session times, coin balance, cosmetic unlocks, leaderboard position. |
| Never collected | Payment card details, bank details, identity documents, government identifiers, biometric data. No mechanism exists on this platform to submit any of them. |
Identity documents: do not upload them
Any KYC or verification screen shown on Flickloot is a demonstration of how such a flow should behave. It executes entirely in the browser, accepts specimen documents only, and transmits nothing to any server. Do not upload a real passport, identity card, or driving licence. It will not be processed, and it should not be sent.
Why it is collected
- Email address — to authenticate an account and to enable its deletion on request. Nothing else. No marketing email is sent.
- Gameplay records — to persist the daily coin allowance across devices, to unlock cosmetics, to display the House Ledger, and to operate leaderboards.
- Approximate location — to apply jurisdictional access rules, in real time, and not retained.
What is not done with it
No data is sold. No data is shared with advertisers, data brokers, or affiliate networks. No behavioural profile is built for the purpose of re-engaging a player. No push notification is sent to encourage a return to play. There is no advertising on this platform.
Rights
Under the GDPR and, for California residents, the CCPA, a person may request access to their data, correction of it, deletion of it, and a portable copy of it. Flickloot answers such requests within thirty days, and typically far faster.
Beyond that: several games expose an export button that produces the complete spin-by-spin history as a file, immediately, without a request being made. Data portability is a legal right that the industry answers in thirty days with a PDF. It should be a button.
Retention
Account data is held until the account is deleted. Deletion removes the email address and the gameplay records. Aggregate statistics that identify nobody may be retained.
Processors
Account authentication and storage are handled by a third-party database provider on Flickloot’s behalf. Website hosting is provided by IONOS. Both act on instruction only.
Contact
Data requests via the contact page.