Privacy Policy
Last updated: 2026-09-02
This Privacy Policy describes how PlayFlux Pro ("we", "us", or "our") collects, uses, discloses, and protects personal information when you visit https://playfluxpro.app, create an account, sign in with Google or other OAuth providers, purchase credits, or use our AI generation features (collectively, the "Service"). By using the Service, you acknowledge this Privacy Policy.
1. Who We Are (Data Controller)
PlayFlux Pro operates the Service at https://playfluxpro.app. For privacy-related requests, contact us at service@playfluxpro.app or via the Support page on our website.
2. Information We Collect
Account & identity data: display name, email address (when provided by you or an OAuth provider), avatar URL, OAuth provider name (Google, Discord, or Telegram), OAuth provider user ID, internal user ID, account status, credits balance, referral code, and signup/login timestamps. Usage data: generation jobs, template selections, credit transactions, support tickets, and coarse location such as country or region inferred from CDN or network headers. Technical data: IP address (may be hashed for abuse prevention), browser type, device information, session identifiers, and server logs. Payment data: billing status, transaction IDs, and payment method metadata processed by third-party payment providers; we do not store full credit card numbers. Communications: messages you send to support or compliance channels.
3. Google Sign-In (OAuth)
When you choose "Sign in with Google", we use Google OAuth 2.0 to authenticate you. Google may share with us your Google account display name, email address (if you grant email scope), profile picture URL, and a unique Google user ID (sub). We use this information only to create and maintain your account, display your profile in the Service, communicate with you about your account, and prevent fraud. We do not access your Google Drive, Gmail, contacts, or other Google data beyond basic profile information authorized during login. Google's use of your data is governed by Google's Privacy Policy: https://policies.google.com/privacy. You may revoke our access through your Google Account security settings at https://myaccount.google.com/permissions.
4. Discord & Telegram Sign-In
When you sign in with Discord, we receive your Discord user ID, username, avatar, and email (if you authorize the email scope) to operate your account. When you sign in with Telegram Login Widget, we receive your Telegram user ID, name, username, and profile photo hash as provided by Telegram. We do not post to your Discord or Telegram accounts without separate authorization. Discord and Telegram process data under their own privacy policies.
5. How We Use Personal Information
We use personal information to: provide and operate the Service; authenticate users and maintain sessions; process payments and manage credits; detect, prevent, and respond to abuse, fraud, and security incidents; enforce our Terms, Acceptable Use Policy, and legal obligations; improve features and troubleshoot errors; send service-related communications; and comply with lawful requests from authorities.
6. Legal Bases for Processing (EEA/UK Users)
Where applicable under GDPR or UK GDPR, we process personal data based on: (a) performance of a contract (providing the Service you requested); (b) legitimate interests (security, fraud prevention, service improvement) balanced against your rights; (c) consent (where required, such as optional analytics if enabled); and (d) legal obligations (tax, compliance, law enforcement requests).
7. Cookies & Similar Technologies
We use essential HTTP-only session cookies (such as user_session) to keep you signed in and protect against unauthorized access. We may use additional cookies or similar technologies for admin authentication, referral tracking, age-gate acknowledgment, or analytics if enabled in site settings (e.g. Google Analytics). You can control cookies through your browser settings; disabling essential cookies may prevent login. See our Cookie Notice for more details.
8. How We Share Information
We do not sell your personal information. We may share data with: infrastructure and hosting providers (e.g. Cloudflare for Workers, D1, R2, KV); AI inference and media processing providers necessary to fulfill generation requests; payment processors to complete transactions; analytics providers if you have not opted out and analytics are enabled; professional advisers and authorities when required by law or to protect rights and safety. All service providers are authorized to process data only as needed to perform services for us.
9. Data Retention
We retain account data while your account is active and for a reasonable period afterward to resolve disputes, enforce agreements, and meet legal obligations. Generation outputs and uploaded media may be automatically deleted after a limited retention period (e.g. 7 days) unless otherwise stated. Server logs and security records may be retained for a shorter or longer period as needed for security and compliance. You may request account deletion as described below.
10. Data Security
We implement technical and organizational measures including HTTPS encryption in transit, secure session cookies, hashed credentials for staff accounts, access controls, and Cloudflare-managed infrastructure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
11. International Data Transfers
Your information may be processed in countries other than your own, including where our cloud providers operate (such as the United States and other regions served by Cloudflare). Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.
12. Your Privacy Rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data; object to or restrict certain processing; withdraw consent where processing is consent-based; and lodge a complaint with a supervisory authority. To exercise these rights, email us at service@playfluxpro.app or use the account deletion option in the Service. We will respond within the timeframe required by applicable law.
13. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us data, contact us immediately and we will take steps to delete it.
14. California Privacy Notice (CCPA/CPRA)
California residents may have additional rights including the right to know categories of personal information collected, request deletion, and opt out of sale or sharing of personal information. We do not sell personal information as defined under California law. To submit a request, contact service@playfluxpro.app.
15. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes may be communicated through the Service or by email where appropriate.
16. Contact Us
For privacy inquiries, data access or deletion requests, or compliance questions, contact service@playfluxpro.app or visit https://playfluxpro.app/en/support.