Privacy Policy

1. Controller

Flirxx

2709 N Hayden Island Dr

STE 102316

Portland, Oregon 97217

USA

Contact: support at flirxx.org

2. Scope

This Privacy Policy explains how we collect, use, and protect personal data when you use our website and services (the “Service”).

It applies to users worldwide, including the European Union, United Kingdom, United States, and other jurisdictions.

Where required by law, we comply with applicable data protection regulations including the EU General Data Protection Regulation (GDPR) and US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA).

3. Data We Collect

We may collect the following types of personal data:

• Identity data (e.g. name, username)
• Contact data (e.g. email address)
• Technical data (e.g. IP address, browser type, device information)
• Usage data (e.g. pages visited, time spent, interactions)
• Content data (e.g. messages, form submissions)
• Transaction data (if applicable)

4. How We Use Data

We use personal data for the following purposes:

• To provide and operate the Service
• To communicate with users
• To ensure security and prevent fraud or abuse
• To improve and optimise our website
• To analyse usage and performance
• To comply with legal obligations

We do not use personal data for purposes incompatible with those described above without notice or consent where required.

5. Legal Bases (EEA / UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

• Consent (Art. 6(1)(a) GDPR)
• Performance of a contract (Art. 6(1)(b) GDPR)
• Legal obligation (Art. 6(1)(c) GDPR)
• Legitimate interests (Art. 6(1)(f) GDPR), including website security, functionality, and improvement

6. Cookies and Tracking

We use cookies and similar technologies to:

• enable basic website functionality
• improve performance
• analyse traffic and usage
• (if enabled) support advertising and marketing

Cookies may be:

• session cookies (temporary)
• persistent cookies (stored longer)
• first-party or third-party cookies

Where required by law, non-essential cookies are only used with your consent.

You can control cookies through your browser settings. Disabling cookies may affect functionality.

7. Third-Party Services

We may use third-party services that process personal data, including:

• Hosting and infrastructure providers
• Security services (e.g. Cloudflare)
• Analytics services
• Email and communication providers
• Embedded content providers

These providers may process data such as IP address and usage information.

Where required, we use data processing agreements and appropriate safeguards for international data transfers.

8. International Data Transfers

Your data may be processed in countries outside your country of residence, including the United States and other jurisdictions.

Where required, we implement appropriate safeguards such as Standard Contractual Clauses or equivalent legal mechanisms.

9. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy or as required by law.

When data is no longer required, it is deleted or anonymised.

10. Data Sharing

We do not sell personal data.

We may share data only:

• with service providers acting on our behalf
• when required by law
• to protect rights, safety, or prevent fraud
• in connection with business operations (e.g. hosting, analytics, infrastructure)

11. Your Rights

Depending on your location, you may have the right to:

• access your personal data
• correct inaccurate data
• request deletion of your data
• restrict or object to processing
• data portability
• withdraw consent at any time
• opt out of targeted advertising (where applicable)

EEA/UK users also have the right to lodge a complaint with a supervisory authority.

California residents may exercise rights under the CCPA/CPRA, including:

• right to know what data is collected
• right to delete personal data
• right to opt out of “sale” or “sharing” of personal data (we do not sell personal data)

12. Security

We use reasonable technical and organisational measures to protect personal data.

However, no method of transmission over the internet or electronic storage is completely secure.

13. Children’s Privacy

Our Service is not directed to children under 13, and we do not knowingly collect personal data from children.

If we become aware of such data, we will delete it.

14. Third-Party Links and Content

Our website may include links or embedded content from third parties. We are not responsible for their privacy practices.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

16. Contact

If you have questions about this Privacy Policy or your data, you may contact us at:

support at flirxx.org