Privacy
What this site collects, why, how long it is kept, and what you can ask us to do with it. The short version: we collect what the campaign needs and nothing more, we sell nothing, and there are no ads, trackers or analytics here.
Who we are
Flammis is run by the Flammis team (“we”). For anything on this page, including the requests under Your rights, write to [privacy contact address — set privacy_email in config.php].
What we collect, and why
| What | When | Why |
|---|---|---|
| Your email address | When you join the waitlist | It is your campaign account. We use it to send your sign-in codes and to tell you when a campaign opens or the app is released. |
| Sign-in codes | Each time you ask for one | To confirm the address is yours. We keep only a scrambled form of the code, never the code itself. It works once and stops working after 15 minutes. |
| Your X, Telegram and YouTube usernames | Only if you add them | So we can check the follow, join and subscribe quests. They are seen by the people who review claims. Nothing is ever posted on your behalf. |
| Your quest claims | When you claim a quest | Which quests you claimed, when, and whether they were credited. Your Cinder balance is worked out from these; it is points, not money. |
| Referrals | When you join through someone’s link, or share yours | Who referred whom, so the referral quest can be credited. Someone who refers you sees how many people joined through their link, not who. |
| Your IP address | When you join, claim a quest, or make repeated requests | To stop abuse: limiting repeated attempts, and spotting people referring themselves. Records kept only for limiting attempts are deleted within about an hour. |
One cookie, flammis_sid |
When you visit | Keeps you signed in, for up to 30 days. It is needed for the site to work. There are no tracking, analytics or advertising cookies. |
What we don’t do
- We don’t sell, rent or trade your information to anyone.
- We don’t run ads, analytics or tracking scripts.
- We don’t ask for wallets, payment details or anything you would pay with. Nothing on this site is for sale.
- We don’t post anything on your social accounts.
Who else is involved
- Our hosting provider (Hostinger) runs the server and the database, and sends the sign-in emails. They process this data for us and not for themselves.
- X, Telegram and YouTube. Links to them open their sites, where their own privacy policies apply.
The basis for using it
Where data protection law such as the GDPR applies: we use your email, codes, usernames and claims because you asked to take part in the campaign, and we can’t run it for you without them. We use IP addresses for our legitimate interest in keeping the campaign fair and free of abuse. We send announcements because you joined the waitlist to hear them, and you can ask us to stop at any time.
How long we keep it
- Your account, usernames, claims and referrals: for as long as you have an account. Ask us to delete it and we will.
- Sign-in codes: a used code is deleted at once. An unused one stops working after 15 minutes, and its scrambled form is replaced by the next code you ask for.
- The IP address recorded when you joined or claimed a quest: with your account, for as long as it exists. IP records kept only for limiting attempts: about an hour.
- The sign-in cookie: up to 30 days, or until you sign out or clear it in your browser.
Your rights
You can ask us for a copy of what we hold about you, to correct it, to delete it, to stop using it for announcements, or to object to how we use it. Write to the address under Who we are from the email you joined with, or tell us that address and we will confirm it is yours before acting. We answer within 30 days. If you are in the UK or the EU you can also complain to your data protection authority.
Where it is kept
On our hosting provider’s servers, which may be in a different country from you. Where that means moving data out of the UK or the EU, the provider’s standard safeguards apply.
Children
The campaign is not meant for anyone under 16, and we don’t knowingly collect their information.
Changes to this page
If what we collect changes, this page changes with it and the date at the top moves. Anything significant goes to the waitlist by email first.