Privacy

Spoofy keeps the least it can. This page says what we hold about you, why, and what you can ask us to do with it.

What we hold

• Your account: your email address, and your name and profile picture if you sign in with Google; or your wallet address if you sign in with a wallet.
• Your orders: the public links you ask us to grow, the service, the quantity, the price and the status.
• Your balance: top-ups (the transaction hash, amount and sending address on the blockchain), charges and refunds.
• Developer settings: your API keys (we store only a hash) and webhook addresses.
• Basic logs: request times and errors, kept so the service stays up and to stop abuse.
• How the site is used: see “How we measure the site” below.

We never ask for the password of any social account. Everything we grow is a public link you give us.

Why

To run your account, deliver your orders, keep your balance correct, prevent fraud, and answer you when you ask for help. We do not sell your data and we do not use it for advertising.

How we measure the site

We count visits ourselves, with our own code on our own servers. There is no Google Analytics, no advertising pixel and no other third-party tracker on Fimi, and nothing we measure is shared or sold.

• No cookie, no IP address. Your browser keeps a random visitor number in its own storage, and a random visit number that ends after 30 minutes without activity. We never store your IP address: it is used for a moment, only to stop floods of requests, and then forgotten.
• What a visit records: the pages you open, how long each one is in front of you and how far you scroll; the buttons and links you click; the steps you reach (for example “pasted a link”, “started checkout”, “placed an order”); the website that sent you and any campaign tags in the address; your device type, browser, operating system, screen size and language; and the country your connection comes from, as our network provider reports it.
• Never your links or what you type. For a link you paste we keep only the platform and the site name (say, “X profile, x.com”) — never the link itself — and we never read what you type into a form.
• Linked to your account when you sign in, so we can see what led to an order and make the site better.
• Kept 90 days. After that only daily totals remain (how many visits, from where, on what device), with nothing that points to a person.

Who else sees it

The partners that deliver an order receive the public link and the quantity — nothing that identifies you. Google sees that you signed in with Google. Our network provider (Cloudflare) carries your connection to us. Blockchain transactions are public by nature.

Your choices

You can ask us to export or delete your account. Order and payment records may be kept as long as the law requires. Reach us through the community link on the site.

Cookies

One cookie keeps you signed in. No advertising or tracking cookies — the visit measurement above uses none.