1. Introduction
Maxdrop ("we", "our", or "us") operates the platform at maxdrop.io. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service. By creating an account or making a purchase, you agree to the practices described here.
2. Information We Collect
We collect the following categories of personal data:
- Account data: name, email address, and password (hashed) when you register.
- Sign-in via Google: if you use Google OAuth, we receive your name and email from Google.
- Shipping data: full name, street address, city, region, postal code, country, and phone number — collected when you request shipment of a won item.
- Transaction data: account top-up history, loot box spins, and won items.
- Technical data: IP address, browser type, and usage logs collected automatically.
3. How We Use Your Data
- To create and manage your account.
- To process loot box purchases and record won items.
- To ship physical items to the address you provide.
- To communicate order updates, tracking numbers, and support responses.
- To maintain the security of the platform.
- To comply with legal obligations.
4. Data Sharing
We do not sell your personal data. We may share it with:
- Payment processors: to handle account top-ups securely. Payment card details are processed directly by our payment provider and are never stored on our servers.
- Shipping carriers: your name and address are shared with the carrier fulfilling your shipment.
- Google: if you use Google Sign-In, Google's own privacy policy applies to the authentication step.
- Law enforcement: where required by applicable law.
5. Data Retention
We retain account data for as long as your account is active. Shipping addresses and order records are kept for a minimum of 5 years to satisfy accounting and legal requirements. You may request deletion of your account at any time; however, anonymised transaction records may be retained for legal compliance.
6. Your Rights
Depending on your country of residence, you may have the right to:
- Access a copy of the personal data we hold about you.
- Correct inaccurate data via your profile settings.
- Request deletion of your account and associated personal data.
- Object to or restrict certain processing activities.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at the address below.
7. Cookies
We use essential session cookies to keep you logged in. We may also use analytics cookies to understand how users interact with the platform. You can control non-essential cookies through your browser settings.
8. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and hashed passwords. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Contact Us
For privacy-related questions or requests, please contact us at [email protected].