Privacy Policy
Updated and effective: October 21, 2026
1. Scope and contact
FansLift operates fanslift.com and is responsible for its own processing of account and service data described here. Contact us through support tickets or Telegram @FansLift for privacy requests. Payment, identity and platform providers also process information under their own policies.
2. Information we collect
Account data includes email, verification status, account identifier and basic profile information supplied by Google sign-in. We do not receive your Google password. Order data includes selected services, quantities, target links, optional comment text and instructions, scheduled local time, time zone, delivery cadence, status and support records. Payment data includes top-up values, coin/network, deposit address, payment identifiers, transaction references and status. Affiliate data includes referral attribution, commission, payout requests and payout destinations.
3. Operational information and purposes
Hosting and security systems process network/request information such as IP address, browser information and timestamps. Our frontend error monitoring records account ID where available, page category, approved endpoint category, error code, status and duration. These records support login, service delivery, payment reconciliation, customer support, referral accounting, fraud prevention and fault diagnosis. We minimize alert content and do not intentionally collect passwords, seed phrases, wallet private keys or full card numbers.
4. Cookies, local storage and analytics
Necessary session cookies keep you signed in; browser storage also retains preferences and pending payment references so you can resume the same top-up. Optional Google Analytics runs only after analytics consent. It receives pseudonymous browser/session identifiers, page categories, source, values/currencies and random order references; email, service targets, comment text, wallet addresses and payment-provider IDs are excluded from our analytics events. Change your choice using Privacy settings on the main website. Consent preferences last six months. Withdrawal stops subsequent optional collection and does not erase data already received by Google.
5. Service providers and sharing
Cloudflare hosts the site, database and operational infrastructure. Google supplies optional sign-in and consent-based analytics; Resend delivers login emails; NOWPayments processes current crypto payments. External fulfillment providers receive target links, quantities and instructions needed for their part of an order. Authorized administrators review accounts, orders and support; operational and order alerts may be sent to the operator’s configured Telegram channel. Waffo is under application and is not an active checkout provider; if enabled, its processing will require a policy update and applicable payment disclosures. We do not sell personal information or provide it for third-party behavioral advertising. Data may also be disclosed when required by law or to investigate fraud and protect rights.
6. International processing and security
Our providers operate internationally, so data may be processed outside your country, including in locations supported by their infrastructure. We do not promise storage exclusively in one country or that no overseas team can access it. Access controls, account separation, HTTPS and necessary-data sharing help protect information, but no system is completely secure. Applicable transfer protections and provider contractual terms govern international processing where required.
7. Retention
Frontend error events are subject to a 30-day cleanup policy, with error-rate and alert-window counters subject to a two-day cleanup policy. Internal analytics context and delivery records are retained for up to 30 days. Account, order, payment, referral and support records do not currently have a single automatic deletion deadline; they are retained as needed for ongoing service, reconciliation, disputes, security and applicable obligations. Provider-held records follow their own retention policies. Deletion requests are reviewed, and records required for unresolved transactions or legal obligations may remain.
8. Your choices and requests
Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing, and withdraw optional analytics consent. Contact support; we may verify account ownership using your existing sign-in rather than requesting unnecessary documents. We do not promise deletion of public blockchain transactions or records held independently by platforms and providers. Refusing necessary account or transaction processing may prevent provision of the relevant service.
9. Children and updates
The service is intended for adults aged 18 or above. If you believe a child provided personal information, contact support for review. Material changes will be communicated through the website or appropriate account contact; the revision date appears on this page.
Contact and related policies
English and Chinese versions describe the same service rules; mandatory rights under applicable law prevail.
Optional heatmaps and session replay
Only after explicit permission, Microsoft Clarity records clicks, scrolling and page interactions on signed-out public pages to produce heatmaps and session replay. All text and inputs are masked. Login, account, order, support, top-up and payment pages are excluded, and recording is disabled for signed-in visits. We do not send email, order content, service target links, payment details or custom user identifiers to Clarity. Advertising storage remains denied. Withdraw through Privacy settings to stop subsequent recording; withdrawal does not delete previously received data. Your preference lasts six months.