Privacy & Security: How We Handle Flip Data

At Flip A Coin Free, we understand that privacy and security are paramount, especially when dealing with digital interactions. We are committed to being transparent about how we handle your data and the measures we take to protect your coin flip activity.

This policy outlines our practices regarding user data, flip logs, and security protocols.

What Data Do We Collect?

We aim to collect the absolute minimum amount of data necessary to provide and improve our service.

1. Anonymous Flip Data

• What: When you use our coin flipper, we log the outcome (heads/tails), timestamp, and any parameters used (e.g., weighted probability, custom coin ID).
• Why: This data is essential for:
  • Aggregated Statistics: To understand usage patterns and ensure service stability.
  • Statistical Analysis: To verify the randomness and fairness of our algorithms.
  • Troubleshooting: To identify and fix any bugs or issues.
• Anonymity: This data is anonymized. We do not link flip results to specific users or personal identities.

2. Account Information (Optional)

• What: If you choose to create an account (for saving custom coins, API keys, or access to advanced features), we collect:
  • Email Address
  • Encrypted Password
• Why: To manage your account, settings, and personalized features.
• Security: Your password is encrypted using industry-standard hashing algorithms.

3. API Usage Data

• What: If you use our API, we log your API key usage, request timestamps, and the type of requests made (e.g., single flip, batch flip).
• Why:
  • Rate Limiting: To enforce usage policies and prevent abuse.
  • Service Monitoring: To ensure API performance and availability.
  • Billing: For users on paid tiers.
• Privacy: API data is associated with your API key but not with personal user activity unless you explicitly include metadata that identifies you.

4. Browser and Device Information

• What: Standard, non-identifying information such as browser type, operating system, and general geographic location (derived from IP address, not precise tracking).
• Why: For service improvement, performance optimization, and security.

What Data We Do Not Collect

• Personal Identifiable Information (PII): We do not collect your name, address, phone number, or any other PII unless you voluntarily provide it through account creation.
• Sensitive Financial Information: We do not process or store credit card details directly. Payments are handled by secure third-party processors (e.g., Stripe).
• Your Browsing History: We do not track your activity on other websites.
• Content of Custom Coins (unless reported): While we store the assets for your custom coins, we do not actively monitor their content unless it violates our terms of service (e.g., illegal or harmful material).

How We Ensure Security

Protecting your data is our top priority.

1. Encryption

• Data in Transit: All communication between your browser/device and our servers is encrypted using industry-standard TLS/SSL protocols.
• Data at Rest: Sensitive data, such as account passwords, are encrypted using strong hashing algorithms.

2. Access Control

• Limited Internal Access: Only authorized personnel with a legitimate need have access to operational data.
• Role-Based Access: Permissions are strictly controlled based on job function.

3. Secure Infrastructure

• Cloud Hosting: We utilize reputable cloud hosting providers known for their robust security infrastructure and compliance certifications.
• Regular Audits: Our systems undergo regular security checks and audits.

4. API Key Management

• API keys are unique and should be treated like passwords.
• We recommend storing API keys securely (e.g., in environment variables) and not exposing them in client-side code.

Data Retention Policy

• Anonymized Flip Data: Kept indefinitely for statistical analysis and service improvement.
• Account Data: Retained as long as your account is active. You can request account deletion at any time.
• API Logs: Typically retained for 90 days for monitoring and security purposes, then purged.
• Personal Data: As per regulations, we provide options for data export and deletion upon request.

Your Privacy Rights

You have the right to:

• Access Your Data: Request a copy of any personal data we hold associated with your account.
• Correct Your Data: Update your account information if it changes.
• Delete Your Data: Request the deletion of your account and associated personal data.
• Object to Processing: In certain circumstances, you can object to how we process your data.

To exercise these rights, please contact us at privacy@flipacoinfree.com.

Third-Party Services

We may use third-party services for analytics (e.g., Google Analytics) or payment processing (e.g., Stripe). These services have their own privacy policies, and we recommend reviewing them. We ensure these partners adhere to high privacy and security standards.

Policy Updates

We may update this Privacy & Security Policy periodically. Any changes will be posted on this page. We encourage you to review this policy regularly.

Contact Us

If you have any questions or concerns about our privacy and security practices, please do not hesitate to contact us:

Email: privacy@flipacoinfree.com

We are committed to maintaining the trust you place in us by using Flip A Coin Free.