Policy changelog

This page records changes to our terms of service, privacy policy, community guidelines, and related policies. Current versions are linked in the footer.

October 26, 2026

The draft Operator Pass terms now count valid passes held plus valid purchases passed on for the badge and wall, separately from actual ownership.
A pass counts once per account and can count for both buyer and recipient. Keeping at least one active pass is still required. The terms explain delivery dates, pauses, ended passes, business listings and the dates on badges.
The Operator Pass privacy notice explains the count and its records.

October 25, 2026

Section 8 of the draft Operator Pass terms says that using the Operator role or badge to talk down to others or to claim authority over them is misuse.

October 24, 2026

Section 2.2 of the draft Operator Pass terms lets a business that bought passes ask us to list its company name and logo on the Operators' wall instead of a name and avatar. It says how to ask, how these listings look, when we can decline or end one, what the business lets us do with its logo and how to switch back.
Section 2, section 2.1, section 4 and section 6 of the draft Operator Pass terms say that a business listing shows the company name and logo instead.
Section 11 of the draft Operator Pass terms says that you can pass a pass on only to an account that is your friend on Fluxer when you offer the pass and when they accept it. Section 4 says the same for a business and its staff.
Section 3 of the Operator Pass privacy notice says that it covers the company name and logo of a business listing the same way as a name and avatar, including the versions we make for the wall. Effective October 24, 2026.
Section 3.4 of the terms says that we always tell the affected user when we remove or restrict material because of a copyright claim, and that they can appeal that decision as section 6.2 describes. Effective October 24, 2026.
Section 4 and section 6.2 of the terms link to the Operator Pass terms for the pass itself and for removing its perks. Effective October 24, 2026.
Section 4.1 of the terms says that you keep your subscription price while your subscription stays active and renews without a break. It no longer says the subscription also has to be in good standing. Effective October 24, 2026.
Section 4.1 and section 4.2 of the terms apply to Plutonium that you buy in our iOS app through the App Store or in our Android app through Google Play. Apple or Google bills and renews these purchases under its own terms, and you manage or cancel them in your Apple or Google account. Effective October 24, 2026.
Section 4.2 also says that the 3-day self-service refund applies to purchases that you pay for through Stripe or Google Play, and that you find it on the Plutonium page in "User settings". A gift bought through Google Play can only be refunded this way before someone redeems it. Effective October 24, 2026.
Section 4.2 also says that Apple handles refunds for App Store purchases under its own terms, and that you can also ask Google for a refund of a Google Play purchase, which Google handles under its own terms. Effective October 24, 2026.
Section 4.3 of the terms says that if you are a consumer in the EU or the EEA, you keep your right to withdraw from a Plutonium purchase, including a gift, after Plutonium starts and get a full refund. The period ends at the end of the 14th day after the payment, or the next working day. Effective October 24, 2026.
Section 4.3 also says that business buyers still get the 3-day self-service refund in section 4.2. When a "Withdraw from contract here" button appears next to one of your purchases in "User settings", you can withdraw with it, and we send you an email to confirm your withdrawal. Effective October 24, 2026.
Section 4.3 also says that you withdraw from an App Store purchase through Apple's refund process, and Apple refunds you. If you send it to us instead, we accept it and point you to Apple's process. Effective October 24, 2026.
Section 4.4 of the terms says that Plutonium keeps working while a payment dispute is open, and that a person on our team checks every dispute. A Plutonium payment dispute can lead to enforcement action only if it is fraudulent or in bad faith and meets every condition in section 4.4. Effective October 24, 2026.
Section 4.4 also says a genuine dispute about an incorrect or unauthorized charge never leads to enforcement action. If our payment provider warns us a payment was likely fraudulent, we refund it in full. Section 9 of the Operator Pass terms applies to Operator Pass payment disputes. Effective October 24, 2026.
Section 6.2 of the terms says that the limits in section 4.4 apply when we remove or restrict something to protect payments. Effective October 24, 2026.
Section 2.1 of the privacy policy describes every way to create an account, with an email address or with only a display name, and says that an account started with only a display name can add an email later. Effective October 24, 2026.
Section 2.1 of the privacy policy also says that we no longer offer the credit card check that unlocked age-restricted content in the United Kingdom, that accounts that passed it keep a record that they are 18 or older and that we removed the cards saved only for the check from Stripe. Effective October 24, 2026.
Section 2.1 also describes the company name, address and VAT ID that we keep when you buy for a business, and our VAT ID checks with the European Commission's VAT Information Exchange System (VIES), which send the ID to the Commission and the tax authority that issued it. Effective October 24, 2026.
Section 2.1 also describes the country we record when someone redeems a gift code that was paid for, which VAT law requires. Effective October 24, 2026.
Section 2.1 and section 4.2 of the privacy policy say what we exchange with Apple or Google when you buy Plutonium through the App Store or Google Play, and that their own privacy policies apply to the payment. Effective October 24, 2026.
Section 2.2 of the privacy policy says that Fluxer uses no third-party analytics or advertising services, and that crash and performance reports from the iOS and Android apps go only to servers that we run. Effective October 24, 2026.
Section 2.2 also says that the iOS and Android apps send us crash and performance reports only if you turn on "Send crash and performance reports" under "Advanced" in settings, a setting that is off by default. Effective October 24, 2026.
Section 2.2 also says what a crash or performance report includes and what it leaves out, and that these reports come to us even when you are signed in to an instance that we do not operate. Effective October 24, 2026.
Section 2.2 also says that the app sends us a report about each peer-to-peer connection that you make. It says what each report includes and that we delete each of these reports after 180 days. Effective October 24, 2026.
Section 3.2 of the privacy policy lists working out where VAT is due as one of the uses of approximate location. Effective October 24, 2026.
Section 4.1 of the privacy policy says that in a peer-to-peer call your audio and video go directly between you and the other people in the call, and those people can see your IP address. The app asks you to agree before you join a peer-to-peer call, unless you have chosen to always agree. Effective October 24, 2026.
Section 4.2 of the privacy policy says that our payment processors also create our invoices and credit notes and send some payment emails for us, and that our email provider, which is hosted in the European Union, sends receipts and other billing emails with their invoices attached. Effective October 24, 2026.
Section 6 of the privacy policy says that crash and performance reports from the iOS and Android apps are stored separately, on servers that we run ourselves at Hetzner in Finland, in the European Union. Effective October 24, 2026.
Section 7.3 of the privacy policy says that, like Operator Pass accounts, Visionary accounts are never deleted for inactivity. Effective October 24, 2026.
Section 7.4 of the privacy policy says that we keep crash and performance reports from the iOS and Android apps for 30 days. Effective October 24, 2026.
Section 7.4 also says that payment records include invoices, credit notes, the result of any VAT ID check and records of the billing emails we send you, which never include the email itself. We delete records of billing emails sooner than other payment records, 3 years after we send them, or 1 year after the subscription they belong to ends if that is later. Effective October 24, 2026.
Section 7.4 also says that we delete the content we copied for a report at most 1 year after the report was filed, even if we haven't finished handling the report by then. We keep the record of the report itself as one of our records of the enforcement decisions we make. It says what kind of report it was, which accounts and items it was about and what we decided. Effective October 24, 2026.
Section 12 of the privacy policy gives the correct name of the language cookie on our marketing site, locale. Effective October 24, 2026.
Section 3 of the community guidelines says that apart from where the law requires it, we report terrorist content to law enforcement only where it is necessary to protect people from serious harm. Effective October 24, 2026.
Section 9 of the community guidelines says that a person on our team makes every decision to suspend or ban an account, remove a community, or permanently delete messages. It also describes what our automated spam and abuse defenses can do on their own and how each limit is lifted. Effective October 24, 2026.
We published the Operator Pass terms as a draft. They aren't in effect yet. They take effect when sales of the pass open, and we may change them before then.
The Operator Pass terms say what the pass includes and what it does not, how buying as a consumer or for a business works, when the right of withdrawal applies and when it ends and when we remove the benefits of a pass.
They also say how we handle a payment dispute about a pass, how to pass a pass on to another account and the rules for buyers in Brazil and Australia.
For a pass that came with Visionary, the Operator Pass terms apply only once you turn on its perks, and we'll let you know about that by email.
Section 5 of the draft Operator Pass terms says that if Fluxer Platform AB or the official Fluxer service is ever sold or transferred to someone else, the new owner must take over every existing pass on these same terms.
Section 7.1 of the draft Operator Pass terms says that the record we keep of your consent at checkout also includes your browser details.
We published the Operator Pass privacy notice as its own page. It adds to the privacy policy for people who join the Operator Pass waitlist, appear on the Operators' wall or are listed in the yearly Operators list we publish, and section 2.4 of the privacy policy links to it. Effective October 24, 2026.
Section 2 of the Operator Pass privacy notice describes the waitlist, including what we keep when you join, that joining rests on your consent, the emails we send you and how unsubscribing works. Effective October 24, 2026.
Section 2 also says what we keep when you answer the questions after joining the waitlist. We keep which descriptions of yourself you pick, which perks and bonuses you pick as most important to you and anything you write in your own words, and we delete them together with the rest of the entry. Effective October 24, 2026.
Section 3 of the Operator Pass privacy notice describes what we publish on the Operators' wall and the copies of names and avatars we keep for it with their history. It also gives the legal grounds for each. Effective October 24, 2026.
Section 3 of the Operator Pass privacy notice also says that the wall shows your username and the default avatar until we approve the name and avatar you chose, and describes the yearly Operators list in a release and in the source code, including what happens if you ask us to erase your name. Effective October 24, 2026.
Section 3 also says that your name goes on a yearly Operators list only if you are listed on the wall and turn on "Add my name to the yearly Operators list" in your account settings, which is off by default, and that the legal ground for putting your name on the list is your consent. Effective October 24, 2026.
Section 4 of the Operator Pass privacy notice says how long we keep waitlist entries and the name and avatar copies for the wall. Effective October 24, 2026.
We published the Fluxer Feedback privacy notice as its own page. It adds to the privacy policy for people who use Fluxer Feedback or whose posts on GitHub or reports to our old bug report bot were copied there, and section 2.5 of the privacy policy links to it. Sections 7.3, 7.4 and 12 of the privacy policy and the company information page link to it too. Effective October 24, 2026.
Our security policy says that repro bounties on Fluxer Feedback are XP points for ordinary bugs, with no monetary value. Effective October 24, 2026.
The company information page says that consumers can take an unresolved complaint about the Operator Pass to the Swedish National Board for Consumer Disputes and that we take part in its proceedings. It also lists the Operator Pass terms and privacy notice among our legal documents, and the Operator Pass as one of the ways Fluxer.app is funded. Effective October 24, 2026.
Section 4.2 of the privacy policy describes our service providers by the kind of service they provide, with a few examples. Effective October 24, 2026.
We also reworded parts of the terms, the privacy policy, the community guidelines, the push relay notice, the Operator Pass privacy notice, the company information page, our security policy, our stance on AI, the draft Operator Pass terms and the help articles on copyright and data retention to make them easier to read and understand. Nothing else changed in substance. Effective October 24, 2026.

October 5, 2026

We rewrote the policies in plainer language, put each topic in one place and made them match what we already do. The changes include our end-to-end encryption plans, which our roadmap now describes, deleted communities and channels, phone verification, security records, generative AI, advertising and legal requests. None of them reduced your rights or changed how we collect, use or share your data.

October 2, 2026

The privacy policy says that we never ask for or accept ID documents, selfies or biometric scans to check anyone's age, not even for an age appeal.

September 30, 2026

We removed IPinfo from the privacy policy because we no longer use it.

September 29, 2026

We replaced hCaptcha with ALTCHA, a privacy-friendly check that runs entirely on our own servers, and removed hCaptcha from the privacy policy.

September 27, 2026

We published the push relay notice, which explains what Fluxer and others can see when the official app gets notifications from instances we don't operate.

September 13, 2026

We removed Bunny.net from the privacy policy's provider list because it no longer delivers your files or processes any personal data on our behalf.

August 12, 2026

We rewrote our policies to be shorter and easier to read, without reducing any commitment, adding a new use of your data or changing how long we keep it.

April 25, 2026

The privacy policy explains that phone verification only checks suspicious sign-ups and that the number is never linked to your account or user ID. SMS two-factor authentication isn't available for accounts created on or after April 25, 2026.

April 18, 2026

We updated the privacy policy to match our current providers, hosting, retention periods and content safety practices, and removed providers that no longer process personal data. None of it added a new use of your data or sent new data out of Fluxer.

April 2, 2026

The terms say that Fluxer must not be relied on for military, emergency response, healthcare or other safety-critical use, or for critical infrastructure.