Fluxer Privacy Policy

Effective: 1 October 2025
Last updated: 1 October 2025

Privacy policy summary

We take your privacy seriously and are committed to protecting your personal information. Here's what you should know:

We do not sell, rent or trade your personal data to third parties
We are not end-to-end encrypted, but we use strong encryption for data both in transit and at rest
We collect only the minimum data necessary to provide and improve our service
You can export, manage and delete your data at any time through your privacy dashboard
We comply with GDPR, CCPA and other applicable privacy laws and regulations

1. Who we are

We are Fluxer Platform AB, a Swedish limited liability company (Swedish organisation number: 559537-3993). We operate the Fluxer chat platform and related services. As a company based in Sweden, we are subject to and comply with European Union data protection laws, including the General Data Protection Regulation (GDPR).

2. Information we collect

Information you provide to us

Account information: email address, username, password (hashed using Argon2id), date of birth and optionally your phone number for two-factor authentication
Content and communications: messages, files, images, community information, voice communications and profile data you choose to share
Payment information: if you purchase premium features, payment processing is handled securely by Stripe. We do not store your full payment card details

Information we collect automatically

Device information: IP address, browser type and version, operating system, device identifiers and similar technical data
Usage information: how you interact with Fluxer, including pages visited, features used, time spent on the platform and interaction patterns

Information from other sources

Information when other users mention you, share content involving you or interact with your account
Basic information provided when you contact our support team or interact with customer service

3. How we use your information

We use the information we collect for the following purposes:

To provide, maintain and improve the Fluxer platform and services
To secure your account and prevent unauthorised access
To send important service updates, security alerts and administrative messages
To detect, investigate and prevent abuse, fraud and violations of our terms
To scan uploaded media for child sexual abuse material (CSAM) as required by law
To process payments, manage subscriptions and handle financial transactions
To improve our service through analytics and user experience research
To comply with legal obligations and respond to lawful requests

IP address geolocation

We may geolocate your IP address to the city, state and country level for the following purposes:

Providing security alerts when logins occur from new or unusual locations
Showing you where your account is currently logged in for security monitoring
Preventing fraud, detecting abuse and protecting platform integrity
Determining regional age requirements and access eligibility based on local laws

We use IP geolocation databases that run locally on our servers for internal platform functions. To determine whether you can access the platform based on your region, we use a geolocation service provided by our content delivery network that processes your IP address on their infrastructure using code we control.

4. Who we share information with

We do not sell your personal data. We share information only in the following limited circumstances:

When you direct us to share

When you send messages to other users on the platform
When you join communities
When you share content publicly or with specific groups

With service providers

We work with trusted third-party service providers who help us operate Fluxer:

OVHcloud (primary hosting in Vint Hill, Virginia, USA)
Backblaze (encrypted backups stored in Amsterdam, Netherlands)
Cloudflare (content delivery network for user-generated content served on our fluxerusercontent.com domain, providing edge caching, CSAM scanning and IP geolocation services to determine regional platform access eligibility)
Bunny.net (CDN for static website assets)
Stripe (payment processing)
Google (Tenor GIF search and YouTube embeds; anonymised through our servers when possible)
hCaptcha (bot prevention and security)
Twilio (transactional emails and SMS notifications)
Fastmail (support email infrastructure)
Porkbun (domain registration services)

When required by law

We may disclose your information when legally required to do so or when necessary to protect the safety and rights of our users, the public or our company.

5. Content scanning for safety

We have enabled Cloudflare's CSAM Scanning Tool on content served through our user content delivery network to help identify and block child sexual abuse material. This tool compares cached content against hash lists from organisations like the National Center for Missing & Exploited Children (NCMEC).

The scanning applies only to media files served through Cloudflare's cache on our fluxerusercontent.com domain. Text messages and the main Fluxer platform do not route through Cloudflare. When prohibited content is detected, Cloudflare blocks it and notifies us for appropriate action and reporting.

6. Data storage and international transfers

Where your data is stored

Primary servers: OVHcloud data centre in Vint Hill, Virginia, USA
Encrypted backups: Backblaze data centre in Amsterdam, Netherlands
User-generated content CDN: Cloudflare edge locations worldwide (for fluxerusercontent.com domain)

International data transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. We ensure that appropriate safeguards are in place for all international data transfers, including standard contractual clauses and other mechanisms approved under applicable data protection laws.

7. Data retention

Active accounts

We retain your personal data for as long as your account remains active and you continue to use Fluxer's services.

Deleted content

Messages and content are permanently deleted from our active systems immediately upon deletion
Deleted data may remain in our backup systems for up to 14 days before being permanently removed
For user-generated content cached on Cloudflare's edge network, we use Cloudflare's Instant Purge to invalidate cached attachments as soon as possible after deletion, though this process may experience slight delays due to rate limits and propagation

Inactive accounts

Accounts that remain inactive for more than two years may be deleted at our discretion.

Payment and transaction data

We retain transaction records and payment information as required for accounting, tax compliance and legal obligations.

8. Your privacy controls

Privacy dashboard

Access your comprehensive privacy dashboard to:

Export all your personal data in a machine-readable format
Set up automatic message deletion schedules
Delete messages based on custom filters and criteria
Review all information we maintain about you

Account management controls

Edit or delete individual messages and content
Update your profile information and preferences
Delete your entire account and associated data
Manage notification settings and communication preferences
Control payment methods and subscription settings

9. Data security

We implement robust security measures to protect your information:

Industry-standard encryption for data in transit (TLS)
Strong encryption for data at rest on our servers
Regular security updates and patch management
Strictly limited staff access to user data on a need-to-know basis
Secure, professionally managed data centres
Regular encrypted backups for disaster recovery

10. Your privacy rights

Under GDPR, CCPA and other applicable privacy laws, you have the following rights:

Access: request access to your personal data
Correction: request correction of inaccurate or incomplete data
Deletion: request deletion of your data ("right to be forgotten")
Portability: export your data in a portable, machine-readable format
Object: object to certain types of data processing
Restriction: request restriction of processing in certain circumstances
Withdrawal: withdraw consent for processing based on consent

To exercise these rights, use your privacy dashboard or contact us at privacy@fluxer.app.

11. Children's privacy

Users must meet the minimum age requirement in their region to create and use a Fluxer account. We determine eligibility dynamically based on your geographic location. This minimum age is typically 13 years old, but varies by country and may be higher in certain jurisdictions.

Due to privacy concerns and resource constraints, we cannot implement the invasive age verification methods required by some jurisdictions. Therefore, we may restrict account registration and platform access from certain countries and US states that mandate such verification beyond self-declaration. Your ability to register for and continue using Fluxer depends on whether your IP address can be geolocated to an allowed region, both at registration and during ongoing use of the platform.

We do not knowingly collect personal information from children under the minimum age in their region. If we become aware that we have inadvertently collected such information, we will take immediate steps to delete it.

12. Cookies and similar technologies

We do not use cookies on the Fluxer application itself. We handle authentication, session management and user preferences through alternative secure methods that do not require storing cookies on your device. However, we do use a single cookie on our marketing website (fluxer.app) solely to remember your language preference and provide a localised browsing experience. This cookie does not track you or collect any personal information.

13. Third-party services and links

When you use features that involve third-party services (such as YouTube embeds or GIF search):

We route requests through our servers when technically possible to protect your privacy
Third-party services may have their own privacy policies that govern their data practices
We anonymise your searches and requests where feasible to minimise data exposure

14. Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by email or through the platform. Your continued use of Fluxer after such changes take effect constitutes acceptance of the updated policy.

15. Contact us

For account-related enquiries and data requests, you must contact us from the email address associated with your Fluxer account. This is how we verify your identity and ensure we're communicating with the actual account holder.

Data protection officer

Email: dpo@fluxer.app
Hampus Kraft, founder and CEO

Privacy enquiries

Email: privacy@fluxer.app

General support

Email: support@fluxer.app
Website: fluxer.app

Postal address

Fluxer Platform AB
Norra Kronans Gata 430
136 76 Brandbergen
Stockholm County, Sweden
Organisation number: 559537-3993