Privacy Policy
Last updated: 8 October 2026
1. Who is responsible for your data
fccoins.org is run by FCCoins ("we", "us", "our"). For the personal data handled through this website, as described in this policy, FCCoins is the controller: we decide what is collected and why. You can reach us about anything here at [email protected].
This policy follows the EU General Data Protection Regulation (GDPR) and, for visitors in the United Kingdom, the UK GDPR. "Personal data" means any information about you as an identifiable person, such as your email or IP address.
2. What this policy covers
This policy covers fccoins.org: the pages you browse, the setting the site saves in your browser and the messages you send us. There are no customer accounts on the site, and you can read every page without telling us who you are.
It does not cover our partner's checkout. A buy button takes you to Onlyfarms at onlyfarms.gg, which runs checkout, takes payment and delivers the coins. What you enter there, including your email address, payment details and the EA account details a Comfort Trade order needs, is collected by Onlyfarms under its own privacy policy and terms. The link from our site passes on only the offer you picked, such as platform and amount, not information about you.
3. The data we collect and where it comes from
Technical data when you visit
fccoins.org is hosted and protected by Cloudflare. As with any website, Cloudflare's network receives technical data with every request your browser makes: your IP address, the page requested, the date and time, your browser and device type and the page that sent you to us. Cloudflare uses it to deliver the site and to block attacks and abusive traffic, and keeps request logs for those purposes. It may also set a strictly necessary security cookie, listed in our Cookie Policy. Any traffic figures we see in our Cloudflare account are totals, not used to identify anyone.
Fonts
The site's fonts are stored on fccoins.org itself and load from our own domain like the rest of the page. No font service such as Google Fonts receives your IP address when you visit.
Your currency setting
If you choose a display currency, your browser remembers it in local storage under the name fc-currency. The setting stays on your device and is never sent to us.
Messages you send us
When you email support, we receive your email address, your name if your email shows it, and whatever you write, including any order number or screenshots. If your question is about an order, we may also get that order's details, such as its status and what has been delivered, from Onlyfarms so that we can help you.
Live chat and forms
The contact, affiliate and sell-coins forms on the site are not connected yet and send nothing. Once they and live chat are connected, we'll receive what you enter, such as your email address and message, and the provider running the chat or form will process it on our behalf.
What we don't collect
- Card or bank details. They're entered only on our partner's checkout, never on fccoins.org.
- Your EA password or backup codes. Comfort Trade details go to Onlyfarms with your order, not to us.
- Tracking data. The site runs no analytics or advertising trackers.
4. Why we use your data and our legal bases
Article 6 of the GDPR, and of the UK GDPR, requires a legal basis for each use of personal data. These are ours:
- Running and securing the site: legitimate interests (Article 6(1)(f)). We have a legitimate interest in delivering fccoins.org reliably, showing it as designed and protecting it and its visitors from fraud, bots and attacks. The data handled by Cloudflare relies on this basis.
- Help with orders: contract and steps before a contract (Article 6(1)(b)). When you ask about buying coins, or need help with an order placed through our partner, we use your message and the order details to answer you and put things right, including under our guarantee and refund policy.
- Other questions: legitimate interests (Article 6(1)(f)). If you write about something else, such as a partnership, we use your message to reply.
- Where we ask: consent (Article 6(1)(a)). If we ever ask for your permission, for example before adding analytics, we rely on your consent. You can withdraw it at any time, without affecting anything done before.
- Legal duties: legal obligation (Article 6(1)(c)). We may keep or disclose data where the law requires it.
Where we rely on legitimate interests, we have weighed them against your rights, and you can object (see section 8). We don't sell personal data, we don't build advertising profiles, and we don't make decisions about you by purely automated means that have legal or similarly significant effects.
5. Who receives your data
We share personal data only with these recipients:
- Cloudflare hosts fccoins.org and provides its content delivery and security. It processes technical request data, including IP addresses.
- Onlyfarms is our checkout and delivery partner. When you ask for help with an order, we may pass your order number and the details of your request to Onlyfarms, and receive order information from it, so the problem can be solved. What you enter at checkout goes to Onlyfarms directly, under its own policy.
- Our email provider hosts the support mailbox and stores the emails you send us and our replies.
- Chat and form providers will process what you send through live chat and the site forms once these are connected.
- Authorities and professional advisers may receive data where the law requires it, or where it's needed to establish, exercise or defend legal claims.
Services that process data on our behalf may use it only to provide their service to us.
6. International transfers
Some of these providers are based outside the UK and the European Economic Area, or run servers around the world, so your data may be processed in other countries, including the United States. When personal data leaves the UK or the EEA, the transfer relies on safeguards recognised by data protection law, such as an adequacy decision for the destination country or the standard contractual clauses included in the provider's data protection terms. You can ask us for more information about these safeguards.
7. How long we keep your data
We keep personal data only for as long as we need it for the purpose it was collected for, and for as long as the law requires us to keep it. In practice:
- Support emails are kept with the conversation while they may still be needed, for example for a follow-up question or a claim about an order, and are then deleted.
- Cloudflare keeps technical request data under its own retention policy.
- The
fc-currencysetting stays in your browser until you clear it. We never hold a copy. - Anything we must keep by law is kept for the period the law sets.
8. Your rights
Under the GDPR and the UK GDPR you have the right to:
- Access: ask whether we hold personal data about you and receive a copy of it.
- Correction: have inaccurate data corrected and incomplete data completed.
- Erasure: have your data deleted where there's no longer a valid reason to keep it.
- Restriction: ask us to keep your data but stop using it, for example while you challenge its accuracy.
- Objection: object to any use based on legitimate interests. We'll stop unless we have compelling grounds that override yours, or need the data for a legal claim.
- Portability: receive the data you gave us in a common, machine-readable format, or have it sent to someone else, where we use it on the basis of consent or a contract.
- Withdrawing consent: at any time, wherever we rely on it.
How to use your rights
Email [email protected], ideally from the address you used with us, and say which right you want to use. We may ask you to confirm your identity first, so that your data doesn't go to someone else. We reply within one month; if a request is complex, the law lets us take longer, and we'll tell you if we need to. Using your rights is free unless a request is clearly unfounded or excessive.
Some rights have limits; for example, we can't delete data the law requires us to keep. Data about your order, payment or EA account is held by Onlyfarms, so requests about it go to Onlyfarms. If you're unsure who holds what, ask us.
9. Complaints
If you're unhappy with how we've handled your data, please tell us first at [email protected] and we'll try to put it right. You also have the right to complain to a data protection supervisory authority, in particular in the country where you live, where you work or where you think the problem happened. In the UK this is the Information Commissioner's Office (ICO); each EU country has its own authority.
10. Children
Ordering through FCCoins is for people aged 18 or over, or younger players with a parent's or guardian's permission, as our Terms of Service explain. The site isn't aimed at children, and we don't knowingly collect personal data from a child without that permission. If you think a child has sent us personal data, contact us and we'll delete it.
11. Security
The whole site runs over an encrypted HTTPS connection, and Cloudflare filters out attacks and abusive traffic before it reaches the site. Because fccoins.org has no accounts and takes no payments, very little personal data passes through it at all. Access to the support mailbox is limited to the people who need it to answer you.
No system is completely secure. If a breach ever put your data at risk, we would inform you and the supervisory authority as the law requires. You can help, too: never send your EA password, backup codes or card details by email, to us or to anyone claiming to be us. Comfort Trade details belong only with your order on our partner's site. See is it safe to buy coins for more on protecting your account.
12. Changes to this policy
We'll update this policy when the site changes, for example when live chat and the forms are connected, and when the law or our providers change. The date at the top shows the latest version. If a change significantly affects data you've already given us, we'll tell you directly where we can.
13. Contact
For any question about this policy or your personal data, email [email protected]; email gives both of us a written record. Other ways to reach us are on the contact page, and cookies and local storage are covered in our Cookie Policy.