Privacy Policy
Last updated: September 2026
1. Information We Collect
We collect information you provide directly: name, email, phone number, delivery address, and payment details. We also collect usage data such as pages visited, device type, and IP address through standard web analytics. In the FunLoot app we also collect device identifiers (an app installation ID and, on Android, the advertising ID), your approximate location based on your IP address, the screens you view and actions such as purchases, crash diagnostics, and, if you turn on notifications, your device's push notification token.
2. How We Use Your Information
We use your information to process orders, provide customer support, send order updates via WhatsApp or email, improve our platform, and comply with legal requirements. We do not sell your personal data to third parties.
3. Payment Security
All payments are processed through Paymob, a PCI DSS-compliant payment gateway. FunLoot does not store credit card numbers on our servers. Payment data is encrypted and handled securely by our payment partner.
4. Data Sharing
We share your data only with: payment providers (Paymob, and Tabby or Tamara when you choose them) to complete transactions, shipping partners to deliver orders, PSA for grading submissions (name and card details only), service providers that host our services, deliver notifications, and run analytics and crash reporting for us (such as Google Analytics for Firebase, PostHog, Sentry, and Expo), and as required by Saudi Arabian law. These providers process data on our behalf. We do not sell your personal data.
5. Cookies & Analytics
We use cookies and similar technologies to improve your browsing experience, remember preferences, and analyze site traffic. You can disable cookies in your browser settings, though some features may not work correctly. In the FunLoot app we use Google Analytics for Firebase and PostHog to understand how the app is used and which campaigns bring people to FunLoot, and Sentry to diagnose crashes. Firebase data is not linked to your name, email, or phone number, and PostHog uses only your FunLoot account ID when you are signed in. The iOS app does not use Apple's advertising identifier (IDFA). On Android, Firebase reads the device's advertising ID for analytics; you can reset or delete it in your device's Google settings.
6. Data Retention
We retain your account and order data for as long as your account is active or as needed to provide services. Order and transaction records are kept, anonymized, for at least 10 years, as Saudi commercial and tax law requires. You can request deletion of your data by contacting us — we will process requests within 30 days.
7. Your Rights
You have the right to access, correct, or delete your personal data. You can delete your account in the app (Account, then Privacy, then Delete my account); funloot.com/legal/delete-account explains every way to ask and what we keep. You may also withdraw consent for marketing communications at any time, and turn off notifications in your device settings. Contact us to exercise these rights.
8. Children's Privacy
FunLoot is not directed at children under 13. We do not knowingly collect personal information from children. If we become aware of such data, we will delete it promptly.
9. Changes
We may update this policy from time to time. Significant changes will be communicated via our platform or WhatsApp.