Privacy Policy

LootCodes acts as the controller for personal data processed through our website and related services.

This policy applies to visitors, account holders, buyers, and support request submitters.

Depending on your interaction with LootCodes, we may process identity, transaction, technical, and communication data.

• Account data: email, profile details, authentication metadata.
• Order/payment data: purchased items, order status, payment references, anti-fraud checks.
• Technical/security data: IP address, device/browser signals, session logs, rate-limit events.
• Support data: tickets, messages, optional attachments, and verification records.

We process personal data to fulfill contracts, comply with legal obligations, protect legitimate interests, and where required, based on consent.

• Contract: account operations, checkout, key delivery, and order support.
• Legitimate interests: service security, fraud prevention, abuse monitoring, and reliability improvements.
• Legal obligations: tax/accounting records, lawful requests, and regulatory compliance.
• Consent: optional marketing communications and certain analytics/tracking settings.

We share data with trusted processors only where necessary to operate the service.

Processors may include infrastructure, payment, communications, analytics, error monitoring, and security vendors.

• Processors are contractually required to apply appropriate confidentiality and security controls.
• We do not sell personal data as part of our core business model.

Data may be processed in jurisdictions different from your residence depending on service provider infrastructure.

Where required by law, we rely on recognized transfer safeguards and contractual protections.

We retain personal data only as long as necessary for operational, legal, and security purposes.

• Order and transaction records are retained for legal/accounting requirements.
• Security and fraud logs may be retained to protect service integrity and investigate abuse.
• Support records are retained to resolve disputes and maintain service quality.

We use layered technical and organizational measures, including access controls, monitoring, and least-privilege handling of sensitive operations.

No internet-based system is absolutely secure, but we continuously improve our safeguards.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object, or receive a portable copy of personal data.

You may also withdraw consent where processing is based on consent.

We use cookies and similar technologies for security, core functionality, analytics, and preference management.

For cookie categories and controls, review our Cookie Policy and consent settings.

LootCodes services are not intended for children below the minimum legal age applicable in your region.

If we identify unauthorized child data submission, we take steps to remove or restrict such data.

We may update this Privacy Policy when legal, product, or operational requirements change.

Updated versions are effective on publication unless another effective date is stated.