Privacy Policy
Last updated: November 5, 2026
This Privacy Policy explains what information we collect when you use LootZy, how we use it and what rights you have. We collect only what we need to run the store and keep it safe.
1. Information we collect
Depending on how you use the website we may collect:
- contact details: the email address you enter at checkout, and your name or login details if you create an account;
- order details: products bought, prices, delivery status and the codes delivered to you;
- payment details: the cryptocurrency, amount, transaction identifier and wallet address used to pay (we never see private keys or card numbers handled by payment providers);
- technical data: IP address, browser and device type, language, country and pages visited;
- messages you send to our support team.
2. How we use your information
We use your data to:
- process payments and deliver your codes and receipts;
- provide customer support and handle refunds or replacements;
- prevent fraud, abuse and money laundering, and comply with the law;
- show prices and content in your language and region;
- understand how the website is used so we can improve it.
3. Legal basis
Where data protection law requires a legal basis, we rely on performing our contract with you (orders and delivery), our legitimate interests (security, fraud prevention, improving the service), legal obligations, and your consent where we ask for it (for example optional cookies).
4. Sharing
We do not sell your personal data. We share it only with service providers that help us run the store, such as payment and blockchain-monitoring services, email delivery, hosting and analytics providers, and product suppliers when needed to fulfil your order. We may also disclose data when the law requires it or to protect our rights.
5. International transfers
Our providers may be located in other countries. Where required, we take steps so that your data stays protected when it is transferred.
6. Retention
We keep personal data only as long as needed for the purposes above, including to meet accounting, security and legal requirements, and then delete or anonymise it.
7. Security
We use technical and organisational measures such as encrypted connections and restricted access to protect your data. No system is completely secure, so please keep your login details and email account safe.
8. Your rights
Depending on where you live you may have the right to access, correct, delete or export your data, to object to or restrict some processing, and to withdraw consent. To exercise a right, contact our support team; you may also complain to your local data protection authority.
9. Children
The website is not directed at children and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will remove it.
10. Changes
We may update this policy. The date at the top shows the latest version; important changes will be highlighted on the website.





