Privacy Policy

We collect information to provide better services to our users. This includes:

• Account Information: When you register, we collect your name, email address, username, and encrypted password.
• Facebook/Meta Login Data: If you choose to log in using Facebook, we receive your public profile information (Name, Email Address, and Profile Picture) strictly to authenticate and create your account on our platform.
• Order Information: We keep records of your purchases, order history, and claimed digital goods.
• Technical Data: IP addresses and browser details are temporarily logged for security and fraud prevention.

Order Delivery & Authentication

• Product Delivery: Your email address is strictly used to deliver digital products (e.g., game keys, software licenses) and order confirmations electronically.
• Authentication: We use your credentials and Facebook OAuth data to verify your identity and maintain secure access to your account.

Payment & Security Logging

For payment processing, we use secure third-party gateways (e.g., Stripe, PayPal). **We do not store your raw credit card numbers.** We do log transaction attempts and IP addresses to detect and prevent fraudulent activities, card testing, and unauthorized access.

Lootamo uses cookies and local storage tokens to maintain your active session, keep items in your shopping cart, and remember your preferences. These are strictly necessary for the core functionality of our e-commerce platform.

By using our website, you consent to the use of these essential functional cookies. We do not use intrusive third-party tracking cookies for cross-site advertising.

You may request the deletion of your account and associated personal data, subject to any legal, accounting, security, or fraud-prevention obligations that require certain records to be retained.

• Manual Deletion: You can delete your account from your Profile Settings dashboard.
• Facebook/Meta Webhook: If you logged in via Facebook, you can remove the Lootamo app from your Facebook Settings. This will trigger an automated webhook that initiates the deletion or anonymization of your personal account data and social authentication tokens, except where retention is required for legal, accounting, security, or fraud-prevention purposes.
• Support Request: You can email us at [email protected] to request deletion of your personal account data.

Please note that deleting your account will result in the loss of access to your purchase history and any unclaimed digital keys.

We retain personal data only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. When data is no longer required, it will be securely deleted or anonymized.

We may share limited information with trusted third-party service providers, including payment processors, hosting providers, and authentication providers, solely for the purpose of operating our services. These providers are required to protect your information and process it only for authorized purposes.

Under the General Data Protection Regulation (GDPR) and applicable privacy laws, you are entitled to specific rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can update or correct your personal information from your profile.
• Right to Erasure (Right to be Forgotten): You can request the complete deletion of your data as outlined in Section 4.
• Right to Restrict Processing: You can ask us to pause processing your data under certain conditions.
• Right to Data Portability: You can request your data in a structured, commonly used format.

We may update this Privacy Policy from time to time. Any significant changes will be posted on this page along with an updated effective date.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us: