Privacy Policy

Last updated: 5 November 2026

This policy explains what data Flame Client (“we”, “us”) collects when you use this website, the Flame account system and the Flame loader and client, why we collect it and what your choices are. We keep it to the minimum we need to run the service.

1. What we collect

Account data: your username, your e-mail address (if you registered on the website), a number (UID) and the date you registered. Your password is never stored as text: only a salted, one-way hash of it.
Subscription data: when your subscription ends, and which licence keys you redeemed.
Hardware ID (HWID): a short anonymous code made from your computer’s hardware, used to tie a licence to one PC. It is not your name, your files or your IP address.
Discord data (only if you link Discord or use our bot): your Discord user ID and avatar identifier, so that your subscriber role and bot commands work.
Profile picture (optional): if you upload one, we store it and show it in your account.
Activity log: a short rolling list of account events (for example sign-up, key redeemed, password changed, PC lock reset, loader downloaded) with the time and your account name. It helps us fix problems and stop abuse.
Technical data: like any website, our hosting provider processes your IP address to deliver pages and protect against attacks. We use IP addresses only briefly to limit repeated attempts and do not save visitors’ IP addresses in our account database.

2. Cookies and browser storage

We do not use advertising or tracking cookies and we do not run analytics. When you log in, a session token is kept in your browser’s local storage so you stay logged in; it is removed when you log out. If the captcha is switched on, Cloudflare Turnstile runs in your browser to tell people from bots.

3. Why we use your data

to create your account and provide the service you asked for (contract);
to send you the verification codes you request by e-mail (contract);
to keep the service secure, prevent sharing of licences and stop abuse (legitimate interest).

We do not sell your data and we do not send marketing e-mails.

4. Who processes data for us

Cloudflare: hosting of the website and of the account database;
Resend: delivery of the verification e-mails;
Discord: our bot, tickets and subscriber roles, if you use them.

These providers may process data outside your country under their own terms and safeguards.

5. How long we keep it

We keep account data while your account exists. Verification codes expire within minutes. The activity log only holds recent events. When you ask us to delete your account, we remove it together with the data linked to it.

6. Your rights

You can ask us for a copy of your data, to correct it, to delete your account or to limit how we use it. You can also object to processing based on legitimate interest, and complain to your national data protection authority. To use any of these rights, open a ticket on our Discord.

7. Children

Flame is not meant for children under 16, and we do not knowingly collect their data.

8. Changes

If we change this policy we will update the date above. Continuing to use the service after a change means you accept it.

9. Contact

Questions about your data: open a ticket on our Discord.