This Privacy Policy explains what personal data FLEXTRIK (“we”, “us”) collects when you visit flextrik.com (the “Site”) or buy from us, why we collect it, who sees it and how long we keep it. We keep it to what the shop needs and we do not sell it.
1. What we collect
- Account and order data. Your e-mail address, the time of your sign-ins, the products you ordered, the amount and payment method, and the status of each order.
- Proof of payment. The screenshot, receipt or transaction hash you upload. A receipt can show your name, part of a card number or an account number: please cover anything that is not needed to see the amount, the date and where the money went.
- Technical and usage data (first-party analytics). Your IP address, browser, device type and operating system, the language and time zone of your browser, the page you came from, the pages and sections you viewed, what you pressed, how long you stayed, and what you did in the shop (sign-in, order, payment steps). We use it to run and secure the Site and to understand what works. We do not use third-party analytics or advertising trackers.
- Material for custom work. For a voice tag, the voice, phrase and effects you describe. For a mix, the .zip archive or the link you send, the archive password if you give one, your notes, and the files we send back. Please send only what you have the right to share.
- Messages. What you write to us on Telegram if you contact support.
2. Cookies and local storage
sid: a cookie that keeps you signed in. Necessary for your account; it lasts up to 30 days.vid(cookie) andfx_vid(browser storage): a random identifier of your browser used by our analytics to tell visits apart. It contains no personal data by itself and lasts up to two years.
You can delete them in your browser settings at any time. If you block them you can still read the Site, but you may not be able to stay signed in.
3. Why we use your data
- To make and deliver your order and to run your account (performing our contract with you).
- To check payments, prevent fraud and abuse and keep the Site secure (our legitimate interest in protecting the shop and our customers).
- To understand how the Site is used and to improve it (our legitimate interest).
- To keep the records that accounting and tax rules require (a legal obligation).
- To trace the unauthorised sharing of our files: each copy can carry an identifier connected to your purchase (our legitimate interest in protecting our work).
4. Who we share it with
- Postmark (e-mail delivery) receives your e-mail address and the text of the messages we send you.
- Telegram: the proof of payment and the order details are posted to a private chat of our staff, where a person checks the payment. For custom work, your application, notes and (for a mix) the link and password also appear there, and the finished file is handed over through our Telegram bot.
- Cloudflare (traffic proxy and security) and our hosting provider process the traffic of the Site.
- If you send a mix as a link, the file host you chose (for example filebin.net or Google Drive) stores the file under its own terms; we only download it.
- Authorities, when the law requires it.
These providers may process data outside your country, including in the United States and the European Union. We do not sell your data and we do not share it for advertising.
5. How long we keep it
- Analytics events and browser records: 60 days.
- Uploaded proofs of payment: removed 60 days after the order is finished (paid, canceled or expired).
- Files of custom work (the archive you upload and the result we make): removed 60 days after delivery. The application, notes and order record stay with the order.
- Sign-in codes: 10 minutes. Sessions: until they expire or you sign out.
- Orders and account e-mail: kept as long as your account exists and as long as the law requires us to keep sales records; you can ask us to delete your account.
6. Your rights
Depending on where you live (for example in the EU, the UK or California) you may have the right to access your data, correct it, delete it, restrict or object to its use, receive a copy, and complain to a data protection authority. Write to us at @shroomsexxx on Telegram from the contact you used for your order and say what you need. We may need to confirm who you are first. Deleting an order record may cost you access to files you bought.
7. Children
The Site is not meant for children under 16, and we do not knowingly collect their data.
8. Security
The Site is served over HTTPS, accounts use one-time e-mail codes instead of passwords, and access to order data is limited to the people who need it. No system is perfectly secure; tell us at once if you notice anything wrong.
9. Changes
We may update this policy; the date at the top shows the latest version. If a change is important we will say so on the Site.