Last updated:
Review draft published for owner review during pre-launch; legal review remains pending. It separates current platform behavior from processing that would require future commerce or provider activation. Publishing a notice does not itself enable those services.
Operator and privacy contact
Falcon Loot is operated by Falcon for Digital Transformation, based in Cairo, Egypt. For privacy questions or requests, contact info@falconloot.com. The owner must confirm the responsible privacy contact arrangements; this draft does not claim appointment or registration of a data protection officer.
Account and preference information
The platform stores account email addresses, secure password hashes, preferred language, selected market and selling currency, account status and relevant timestamps. It records terms-acceptance and marketing-preference values. An account preference does not establish consent for every purpose or proof that a marketing service is active. New registration and recovery-email issuance currently remain unavailable; existing account sign-in is supported.
Sessions, carts and support
Authentication uses session records and browser cookies with security controls. Session records include relevant creation, activity, expiry and revocation times. Authenticated cart selections are held server-side. Support records include the subject, message, status and account or order relationship where supplied. Do not include passwords, complete digital codes or unnecessary sensitive information in support messages.
Orders and recipient information if commerce is enabled
The platform is designed to record order and product selections, denominations, regions, selling prices and currencies, payment-related references and fulfillment states. Depending on the product, required inputs can include recipient, account or player identifiers and server information. These categories apply only when the relevant operation actually occurs. Live payments, supplier purchases and fulfillment are currently disabled; this notice does not imply existing customer sales or active sharing for fulfillment.
Technical and security information
Origin web logs record request addresses, request method and path, response status, size and duration. The configured origin log format excludes query strings, browser user-agent strings and referrer headers; that is not a claim about all infrastructure processing. The platform also uses security rate-limit data and relevant audit events. Cloudflare operates at the network edge and its performance script is present on the live storefront. That script concerns page performance and browser timing information; owner verification of the exact provider configuration remains required.
Purposes and lawful handling
Current purposes include account access, session security, user preferences, support, platform reliability and investigation of misuse. If enabled, commerce processing would add order administration, payment verification, digital fulfillment and related communications and accounting requirements. The owner and legal reviewer must confirm the lawful grounds, necessary notices and consent controls for each actual purpose, including performance measurement and marketing. This draft does not equate general use of the site with consent to all processing.