Privacy Policy

Last updated 28 September 2026

FlamingServices is run by Philip Totten, trading as Flaming Services in New South Wales, Australia. One FlamingServices account signs you in to every Flaming app (Idler, Tracker, Panel, Shuffle, Monitor, Cars, Bikes, Rust and this hub). This policy covers that shared account. An app that collects more for its own features explains that on its own privacy page.

What we collect for your account

• Your email address and username.
• Your password, stored only as a one-way hash. We can't read it.
• Two-factor settings if you turn them on (the authenticator secret and hashed backup codes).
• Signed-in sessions: when you signed in, which app, IP address and browser type, so you can see and sign out your devices.
• If you choose "Sign in with Google": your Google account ID and email address. We never see your Google password.
• If you subscribe to Flaming+ or a paid plan: your subscription status. Card details are handled by Stripe and never reach our servers.

How we use it

Only to run your account: signing you in, keeping it secure, sending account emails (verification, password reset, security and billing notices) and unlocking paid features you've paid for. We don't sell your data, show ads, or use it for marketing without asking.

Who else handles it

• Stripe, for payments.
• Google, only if you use Google sign-in, and Gmail, which sends our account emails.
• Cloudflare, which protects and delivers our websites.

Our servers are in Australia. We share data with anyone else only if the law requires it.

How long we keep it

For as long as your account exists. Sessions expire on their own within about a week. When you ask us to delete your account, we remove your account data from every Flaming app, except records we must keep by law (such as payment records).

Your choices

You can change your username, email, password and two-factor settings, disconnect Google, and sign out devices at any time from your Account page. To get a copy of your data, correct it, delete your account, or ask anything about privacy, email [email protected]. We'll reply within 30 days. If you're not happy with our answer, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Cookies and storage

We use only what's needed to keep you signed in and remember simple preferences. There are no advertising or third-party tracking cookies.

Changes

If this policy changes in a way that matters, we'll update the date above and tell signed-in users.