Privacy Policy

1. Introduction

LootQuery ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your personal data. By using LootQuery, you consent to the practices described in this policy. If you have any questions, please contact us at privacy@askfixplay.com.

2. Information We Collect

We collect the following categories of information:

Account Information

When you register, we collect your name, email address, and a hashed version of your password. If you register via Google OAuth, we receive your name, email, and profile picture from Google. We do not store your Google password.

Content You Post

All questions, answers, comments, and other content you post on LootQuery are stored on our servers and are publicly visible unless you delete them. Deleted content may remain in our backups for up to 30 days.

Usage Data

We collect information about how you interact with our platform, including pages visited, questions viewed, votes cast, and time spent on the platform. This data helps us improve the user experience and content quality.

Technical Data

We collect IP addresses, browser type, device information, and referrer URLs for security, rate limiting, and analytics purposes. IP addresses are used to enforce rate limits and detect abuse, and are not shared with third parties for marketing purposes.

3. How We Use Your Information

• To provide and operate the LootQuery platform
• To authenticate your identity and maintain your account
• To send transactional emails (email verification, password reset, answer notifications)
• To calculate reputation scores and award badges
• To detect and prevent spam, abuse, and fraudulent activity
• To enforce rate limits and protect platform integrity
• To analyze usage patterns and improve platform features
• To send important service announcements

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

4. Cookies & Local Storage

LootQuery uses session cookies to maintain your login state. We use a secure, HTTP-only JWT session cookie that expires after your session ends or after a defined period of inactivity. We do not use third-party tracking cookies or advertising cookies. We do not use Google Analytics or similar tracking services. Browser local storage may be used for UI preferences such as theme settings.

5. Third-Party Services

We use the following third-party services:

• Resend — for transactional email delivery (email verification, password reset, notifications). Your email address is shared with Resend only to deliver emails you request.
• Google OAuth — optional login via Google. When you use "Continue with Google", Google shares your basic profile data with us. Google's use of your data is governed by Google's Privacy Policy.
• Cloudflare Turnstile — for bot protection on registration and login. Turnstile processes minimal data to determine if you are a human, without tracking you across sites.
• Gravatar — we may display Gravatar profile images based on the hash of your email address. No email address is sent to Gravatar servers.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for legitimate security purposes. Public content you posted (questions, answers) may remain visible after account deletion in anonymized form unless you specifically request full removal. Activity logs and IP records are retained for up to 90 days for security purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — update or correct inaccurate personal data via Settings
• Deletion — request deletion of your account and associated personal data
• Portability — request your data in a portable format
• Objection — object to certain types of data processing

To exercise any of these rights, contact us at privacy@askfixplay.com. We will respond within 30 days.

8. Security

We implement industry-standard security measures to protect your data. Passwords are hashed using bcrypt with a work factor of 12. All data transmission is encrypted via HTTPS/TLS. We use CSRF protection on all state-changing API endpoints, rate limiting to prevent brute-force attacks, and bot detection via Cloudflare Turnstile. Despite these measures, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your LootQuery account.

9. Children's Privacy

LootQuery is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child has registered on our platform, please contact us at privacy@askfixplay.com.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of LootQuery after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or requests, contact us at privacy@askfixplay.com. For general support, use support@askfixplay.com.