Privacy Policy
Version 2026-09-15.1
1. Controller
The controller is 6max Services Ο.Ε., Eleftherias 28, Nea Ionia, Greece, VAT EL801960385, GEMI (Greek business register) 167093803000. For anything about your data: info@flopme.live.
2. What we process
- Account: username, display name, PIN (stored only as a hash — nobody can read it), your declaration that you are an adult, and which version of the terms you accepted and when.
- Email: the address you register with (required for a username + PIN account, and confirmed with a code), add later, or that Google gives us; when it was confirmed, your app language (so we write to you in it), the codes we send you (stored only as a hash, expiring after 15 minutes) and which emails we sent you and when. We use it to confirm the address, to recover your PIN, for security notices (e.g. when your email changes) and, if you run a club, for notices about its Diamonds. We send FlopMe news and offers only if you ask for them.
- Your choices about news by email: whether you agreed to receive FlopMe news and offers, when, to which wording and from where (registration, your account or an unsubscribe link), and every later change.
- Google sign-in (optional): if you link a Google account, we keep its stable identifier, its email, whether Google has confirmed that email, and the name it suggests. We never receive your Google password or access to your other Google data.
- Clubs: which clubs you belong to, roles, status (plays / watch only), join and leave dates, the reason for leaving if you give one.
- Activity per club: coupons, entries, results, Point balance and movements, Point requests, messages you receive from the club.
- Staff actions: when you are staff, we record your actions (e.g. who sent or claimed back Points, who changed a role) with IP address and browser.
- Technical: IP address, browser/device, sign-in times, active session.
- Clubs: name, description, photo/logo.
- Diamond purchases: the buyer gives Stripe a name, email and billing address; we keep the amount, the VAT, the buyer's country, the consent to immediate delivery and any refunds. Card details never reach us.
- We do not ask for or store your location.
3. Purposes and legal bases
- Running accounts, clubs and games — performance of a contract.
- Security, fraud prevention, recording staff actions, isolation between clubs — legitimate interest.
- Invoicing and tax records of clubs — legal obligation.
- FlopMe news and offers by email — your consent, which you can withdraw at any time: under "Sign-in & email" in your account, or with the unsubscribe link in every such email.
We do not sell data, show no third-party advertising and use no third-party tracking tools.
4. Who sees what
- A club's staff (owner, manager, inspector) see, for the members of their own club: name, roles, balance and activity in that club, and Point movements. They see nothing of what you do in another club.
- Other players see your display name in tournament standings and on the tournament TV screen. The Ring Game TV screen shows no names.
- Providers processing data for us: Railway (hosting and database, in the EU), Stripe (payments and VAT calculation), Google (Google sign-in, only if you use it), Resend (sending email — it receives the address and the message) and Elorus (issuing receipts and transmitting them to AADE/myDATA — it receives only the amount, the VAT and the buyer's country, no name or email). Where a provider processes data outside the EU, it does so under the EU standard contractual clauses.
- Authorities, where the law requires it.
5. How long we keep it
- Account and club memberships: while the account exists.
- Game history, Point movements, Diamond purchases and invoices: while the club operates and at least as long as tax law requires. If you delete your account they remain without anything that identifies you.
- Sign-ins (IP, device): 12 months.
- IP and browser on staff actions: 12 months (the action itself is kept as long as the Point movements).
- Ended sessions: 90 days.
- Club messages to players: 12 months.
- Email codes: 7 days. Log of emails sent: 12 months.
- Your choices about news by email: while the account exists.
6. Your rights
Access, rectification, erasure, restriction, portability and objection. You can delete your account in the app (Profile → Delete account, or from the clubs home); for anything else write to info@flopme.live. You change or remove your email and Google sign-in under "Sign-in & email" in your account, where you also turn news by email on or off; withdrawing consent does not affect what was done before it. You may complain to the Hellenic Data Protection Authority (www.dpa.gr).
7. Security
Encrypted connection, PIN and email codes stored only as a hash, one active device per account with revocable sessions, and separation of data per club on every server request.
8. Cookies and on-device storage
Only what the app needs to work: the sign-in token, language, the last screen per club and the app's offline cache (service worker). No advertising or analytics cookies.
9. Minors
The service is not for persons under 18.
10. Changes
For material changes you will be asked to accept the new version in the app.