Overview
FLIPSTREAK is a browser game operated at flipstreaks.com. It is published by DOLGLEV interactive, operated by Anton Dolgalev as a sole proprietor registered in Chile. This Privacy Policy explains what information we collect when you use the game, why we collect it, and the rights you have over it.
If you have any questions about this policy, contact us at legal@flipstreaks.com.
Data we collect
We collect the minimum data needed to run the game and your account:
- Email address. Used to sign in, send verification codes, and deliver purchase receipts.
- Password hash. When you sign up with email and password, we store only a bcrypt hash of your password. We never see, store, or log your actual password.
- IP address. Used for rate limiting, anti-fraud, bot protection, and security logs. IPs are retained only as long as needed for those purposes.
- Session tokens. Signed JWT tokens that keep you logged in. These live in an HTTP-only cookie.
- Flip and gameplay history. Every coin flip is recorded on the server so we can track your current streak, your personal best, your daily best, and your player level.
- Streak records. Your highest streaks are stored so they can appear on the leaderboard and in the live event feed.
- Purchase history. Records of FlipCoin purchases, the items you unlocked, and related transaction metadata from the payment processor.
- Nickname and cosmetic preferences. Your chosen nickname, equipped avatar, avatar frame, coin skin, and nickname style.
We do not run third-party analytics or advertising trackers at this time. If we ever add error tracking (for example, Sentry) or analytics, we will update this policy and post a notice in-game before activating it.
How we use data
We use your data for the following purposes:
- Authentication and account security. Verifying sign-ins, issuing session tokens, and protecting accounts from abuse.
- Gameplay. Recording flips, updating streaks, and computing world and daily ranks.
- Leaderboards and the live event feed. Displaying your nickname and streaks to other players in public surfaces.
- Customer support. Responding to your questions and resolving account issues.
- Fraud prevention. Detecting automation, multi-accounting, stolen payment methods, and exploit attempts.
- Legal compliance. Keeping tax and transaction records as required by Chilean law.
- Service improvement. Reviewing aggregate gameplay patterns to tune difficulty, balance, and performance.
Cookies and local storage
We use essential cookies only. These include the JWT session cookie, a CSRF protection token, and a small cookie that remembers whether you have dismissed the cookie notice. We do not set advertising or cross-site tracking cookies.
Your browser's local storage holds UI preferences such as your selected coin skin, sound on/off, and other display settings. Local storage is readable only by the site itself and is not transmitted to us automatically.
Third-party processors
Running the game requires a small number of vendors. Each of them has its own privacy policy that governs how it handles your data.
- Cloudflare. Hosts the site, the API, and the database. Also provides the CDN, DDoS protection, and the Turnstile bot-protection widget on sign-in forms.
- Google. If you sign in with Google OAuth, Google receives standard OAuth metadata and shares your email and Google account ID with us.
- Resend. Delivers transactional email such as verification codes and purchase receipts.
- Payment processors. Purchases are processed by PayPal, acting as a Merchant of Record. PayPal collects and processes your payment details directly; we receive only the purchase metadata we need to grant your FlipCoins. We may add additional Merchant of Record processors in the future; this policy will be updated before any new processor goes live.
Your rights
You can request the following at any time:
- Access. A copy of the personal data we hold about you.
- Correction. Fixes to inaccurate data, such as your email or nickname.
- Deletion. Removal of your account and associated personal data.
- Portability. An export of your data in a common machine-readable format.
To make a request, email legal@flipstreaks.com from the address tied to your account. We respond within 30 days.
Data retention
Purchase and transaction records are retained for 7 years as required by the Chilean Código Tributario and related tax regulations. This period cannot be shortened, even on deletion request.
Account data is retained until you delete your account. After deletion, gameplay records may be anonymized and retained indefinitely in aggregate form for statistics (for example, "X million flips per month"). Anonymized records cannot be linked back to you.
Minimum age
FLIPSTREAK is not intended for children under 13. We do not knowingly collect personal data from anyone under 13. Parents or guardians who believe a child has registered can email legal@flipstreaks.com and we will remove the account promptly.
International transfers
Our infrastructure is served from Cloudflare's global edge network. When you use the game, your data may be processed in countries outside your own, including the United States and the European Union. By using the service you consent to this cross-border processing.
Security
We take reasonable technical and organizational steps to protect your data. Passwords are hashed with bcrypt. All traffic is served over HTTPS. Session tokens expire and can be invalidated server-side. Sensitive endpoints are rate limited and protected by Turnstile.
No system is perfectly secure. If you believe you have found a security vulnerability, please report it responsibly to security@flipstreaks.com. We appreciate good-faith reports and will not take legal action against researchers who follow standard responsible-disclosure practice.
Changes to this policy
We may update this Privacy Policy from time to time. If the change is material, we will announce it in-game at least 30 days before it takes effect where practical. The "Last updated" date on the policy page always reflects the most recent revision.
Contact
For privacy questions or to exercise any of the rights above, email legal@flipstreaks.com.
