Privacy Policy
Version 2026-09-14.2
1. Controller
The controller is 6max Services Ο.Ε., Eleftherias 28, Nea Ionia, Greece, VAT EL801960385. For anything about your data: info@flopme.live.
2. What we process
- Account: username, display name, PIN (stored only as a hash — nobody can read it), your declaration that you are an adult, and which version of the terms you accepted and when.
- Clubs: which clubs you belong to, roles, status (plays / watch only), join and leave dates, the reason for leaving if you give one.
- Activity per club: coupons, entries, results, Point balance and movements, Point requests, messages you receive from the club.
- Staff actions: when you are staff, we record your actions (e.g. who sent or claimed back Points, who changed a role) with IP address and browser.
- Technical: IP address, browser/device, sign-in times, active session.
- Clubs: name, description, photo/logo.
- Diamond purchases: the buyer gives Stripe a name, email and billing address; we keep the amount, the VAT, the buyer's country, the consent to immediate delivery and any refunds. Card details never reach us.
- We do not ask for or store your location.
3. Purposes and legal bases
- Running accounts, clubs and games — performance of a contract.
- Security, fraud prevention, recording staff actions, isolation between clubs — legitimate interest.
- Invoicing and tax records of clubs — legal obligation.
We do not sell data, do not advertise and use no third-party tracking tools.
4. Who sees what
- A club's staff (owner, manager, inspector) see, for the members of their own club: name, roles, balance and activity in that club, and Point movements. They see nothing of what you do in another club.
- Other players see your display name in tournament standings and on the tournament TV screen. The Ring Game TV screen shows no names.
- Providers processing data for us: Railway (hosting and database, in the EU), Stripe (payments and VAT calculation) and Elorus (issuing receipts and transmitting them to AADE/myDATA — it receives only the amount, the VAT and the buyer's country, no name or email). Where a provider processes data outside the EU, it does so under the EU standard contractual clauses.
- Authorities, where the law requires it.
5. How long we keep it
- Account and club memberships: while the account exists.
- Game history, Point movements, Diamond purchases and invoices: while the club operates and at least as long as tax law requires. If you delete your account they remain without anything that identifies you.
- Sign-ins (IP, device): 12 months.
- IP and browser on staff actions: 12 months (the action itself is kept as long as the Point movements).
- Ended sessions: 90 days.
- Club messages to players: 12 months.
6. Your rights
Access, rectification, erasure, restriction, portability and objection. You can delete your account in the app (Profile → Delete account, or from the clubs home); for anything else write to info@flopme.live. You may complain to the Hellenic Data Protection Authority (www.dpa.gr).
7. Security
Encrypted connection, PIN stored only as a hash, one active device per account with revocable sessions, and separation of data per club on every server request.
8. Cookies and on-device storage
Only what the app needs to work: the sign-in token, language, the last screen per club and the app's offline cache (service worker). No advertising or analytics cookies.
9. Minors
The service is not for persons under 18.
10. Changes
For material changes you will be asked to accept the new version in the app.