LootFarm LogoLootFarm

Privacy Policy

Last updated: October 25, 2025

Using Epic sign-in? See our dedicated Epic Linking & Privacy Statement.

This Privacy Policy explains how LootFarm.gg (“LootFarm”, “we”, “us”, or “our”) collects, uses, and protects information when you visit our website and use our services. LootFarm.gg is operated by LootFarm Gaming, registered in the State of Missouri, in the United States. If you have questions, contact us at privacy@lootfarm.gg.

Information We Collect

  • Account & Profile Data. Display name/username, avatar, role (creator/player), and preferences you set on LootFarm.
  • Gameplay & Reward Activity. Events you complete, coins/tickets earned, and actions related to creator campaigns on LootFarm.
  • Technical Data. Device/browser information, IP address, and diagnostic logs used to secure and improve the service.
  • Cookies & Similar Technologies. We use cookies and local storage to keep you signed in, remember preferences, and measure site performance. You can control cookies via your browser settings.
  • Third-Party Sign-In. If you choose to link an external account (e.g., Epic Games), we receive limited profile data as described in the relevant addendum below.

How We Use Information

  • To provide and personalize LootFarm features and your dashboard.
  • To award and manage Coins/Tickets, campaigns, and fraud prevention.
  • To secure our platform, debug issues, and improve performance.
  • To communicate service updates and respond to support requests.

Legal Bases (EEA/UK only)

Where applicable, we rely on: performance of a contract (providing the services you request), legitimate interests (security, fraud prevention, platform improvement), and consent where required by law.

Sharing

We do not sell your personal information. We share data only with service providers that help operate LootFarm under confidentiality and data-protection obligations, or where required by law. Core providers currently include:

  • Firebase / Google Cloud. Authentication, Firestore, Functions, Storage, and hosting infrastructure.
  • Vercel. Web hosting/build infrastructure for the LootFarm site.
  • Stripe. Payments and billing (for tickets/purchases, where applicable).
  • Resend. Transactional email delivery.

Providers may change as we evolve the service; we only engage vendors under appropriate data-processing terms.

Retention

We keep information only as long as necessary to provide LootFarm and for legitimate business needs (security, auditing, legal compliance). When data is no longer needed, we delete or de-identify it.

International Transfers

We may process data in countries outside your own (e.g., the United States). Where required, we use appropriate safeguards such as Standard Contractual Clauses.

Your Rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your data, and to object to certain processing. Contact us at privacy@lootfarm.gg to exercise these rights.

Children

LootFarm is not directed to children under 13. We do not knowingly allow under-13s to use account linking or earn rewards. If you believe a child has used LootFarm, contact us.

Security

We implement reasonable technical and organizational measures to protect your information, including access controls and encryption in transit. No system is 100% secure; please keep your credentials safe.

Changes

We may update this policy. If changes are material, we will provide notice as required. Your continued use of LootFarm after changes take effect constitutes acceptance.


Epic Account Services (EAS) Addendum

Effective date: October 25, 2025

This section explains how we handle data when you sign in with, or link, your Epic Games Account to LootFarm.gg. LootFarm uses Epic Account Services for authentication and basic profile information to verify gameplay identity and determine eligibility for certain rewards.

Data we receive from Epic

  • Epic Account ID (stable unique identifier)
  • Display name (your Epic/Fortnite username)
  • Language/locale (if provided)
  • Short-lived access token to retrieve the above

We do not receive your Epic password or 2FA codes, and we do not collect Epic credentials directly.

How we use Epic data

  • Authenticate and link your Epic identity to your LootFarm profile.
  • Verify eligibility for rewards tied to gameplay activity.
  • Prevent fraud/abuse related to identity and rewards.
  • Provide support when you request help with linking issues.

We do not sell, rent, or license Epic Account Data, and we do not use it for targeted advertising.

Storage & retention

We store your Epic Account ID and display name in our systems (e.g., Firebase/Firestore). We typically discard access tokens after fetching profile details. We retain Epic data while your accounts remain linked and for a limited period thereafter for security/audit purposes, unless law requires longer retention.

Unlinking & deletion

You can unlink Epic at any time in Profile → Integrations → Unlink Epic (or by emailing privacy@lootfarm.gg). Unlinking removes Epic data from your LootFarm profile and stops further use. If you request deletion, we will delete Epic data we control and honor deletion notices forwarded to us by Epic.

Age

Our Epic integration is not directed to children under 13. Do not link an Epic account if you are under 13.

Transfers, rights & security

We may process Epic data outside your country with appropriate safeguards. You may have rights to access/correct/delete data as described above. We apply reasonable security measures (access controls, encryption in transit).

Epic’s role

Epic is an independent controller of data in your Epic Account. See Epic’s own privacy policy and the Epic Account Services documentation for details about their processing.


Contact Us

For any privacy questions or requests, email privacy@lootfarm.gg