Privacy Policy

1. Introduction

LootBazaar ("we", "us", or "our") operates the website lootbazaar.net (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By accessing or using the Service, you agree to the collection and use of information as described herein.

2. Information We Collect

2.1 Information You Provide

• Account registration data: name, email address, password
• Publisher profile data: bank account or UPI ID for payouts
• Communications: messages you send to our support team

2.2 Automatically Collected Information

• Log data: IP address, browser type, pages visited, time and date of visits
• Click tracking data: which affiliate links you generate and how many clicks they receive
• Device information: device type, operating system
• Cookies and similar tracking technologies (see Section 6)

2.3 Third-Party Data

When you connect your Telegram account, we receive your Telegram user ID, username, and first name from the Telegram Bot API. We receive commission and transaction data from Cuelinks affiliate network postbacks.

3. How We Use Your Information

• To operate and maintain the LootBazaar platform
• To process affiliate commission tracking and payouts
• To authenticate users and prevent fraud
• To send transactional emails (account verification, withdrawal confirmations)
• To improve and personalise your experience on the platform
• To analyse usage patterns and optimise performance
• To comply with legal obligations

4. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share data with:

• Supabase: Our database and authentication provider (data stored on EU servers)
• Cuelinks: Affiliate network — your publisher UUID is used as a sub_id parameter for commission tracking
• Vercel: Our hosting provider, which processes request logs
• Law enforcement: When required by law or to protect rights and safety

5. Data Retention

We retain your account data for as long as your account is active. Transaction and commission records are retained for a minimum of 7 years for financial compliance purposes. You may request deletion of your account and associated personal data by emailing support@lootbazaar.net. Note that financial records required by law cannot be deleted.

6. Cookies

We use essential cookies for authentication sessions and functional cookies to remember your preferences. We also use third-party affiliate tracking cookies (via Cuelinks) to attribute sales to publishers. You may disable non-essential cookies in your browser settings, but this may affect platform functionality. See our Cookie Policy for full details.

7. Security

We implement industry-standard security measures including TLS encryption for data in transit, row-level security (RLS) on all database tables, secure hashed password storage via Supabase Auth, and regular security audits. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability

To exercise these rights, contact us at support@lootbazaar.net.

9. Children's Privacy

LootBazaar is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email. The "Last updated" date at the top of this page indicates when changes were last made. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy-related inquiries, contact us at: support@lootbazaar.net