LootFarm Epic Linking & Privacy Statement

What we collect when you link

• Epic account identifiers: a numeric/opaque account ID and your current Fortnite display name.
• OAuth tokens: short-lived access tokens and (if provided) refresh tokens that allow us to re-read your display name for sync. Tokens are stored server-side only.
• Operational metadata: timestamps and token health to maintain a reliable link.

Scopes requested today: basic_profile and openid. We do not request email or social graph scopes, and we do not take actions on your Epic account.

Why we collect it (purposes)

• Verify that the Epic display name on your LootFarm profile is accurate and current.
• Enable fraud prevention and abuse detection related to earning LootTickets.
• Support account troubleshooting and security (for example, resolving mismatches or impersonation).
• Comply with platform requirements and maintain auditability of verification events.

What we don’t do

• We do not post to or control your Epic account.
• We do not request or store your Epic password.
• We do not sell your personal information.
• We do not request your friends list, social graph, or purchase history.

Sharing

We share your information only with service providers that help us operate LootFarm (for example, cloud hosting and database providers) under contracts that require appropriate confidentiality and security. We may also share information if required by law or in connection with preventing fraud, security incidents, or abuse.

Storage & retention

Access tokens are short-lived; refresh tokens (if issued) are stored server-side in a restricted database. We keep identifiers and tokens only as long as necessary for the purposes above. If you unlink, we remove our ability to refresh and clear stored tokens. We retain minimal records necessary for security, audit, and legal compliance.

Your choices & controls

• Link/Unlink: You can link or unlink at any time from your LootFarm account settings.
• Manual name entry: If you skip linking, you may enter your Fortnite display name manually. Manual entries are more error-prone, and only verified matches can earn LootTickets. If you later link, the Epic-linked name becomes the source of truth.
• Access / Deletion: Contact us to request a copy of your data or to request deletion. When you delete your LootFarm account, we remove your Epic tokens and associated link.

Security

We protect data in transit and at rest and follow least-privilege access principles. Only authorized personnel can access Epic linking data, and access is logged.

Children

LootFarm is not directed to children under 13. If you believe a child has provided us personal information, please contact us so we can take appropriate action.

International transfers

We operate globally and may process data on servers located in the United States or other countries. Where applicable, we rely on appropriate safeguards permitted by law.

Changes

We may update this statement from time to time. We will post the updated version here and update the “Last updated” date above.

Contact

Questions about privacy or Epic linking? Email us at privacy@lootfarm.gg.