Your Privacy Matters
We protect your data with the same care we use for verification evidence.
Last Updated: July 29, 2026
Our Commitment to Your Privacy
This Privacy Policy describes how PlugZ LLC ("PlugZ", "we", "us", or "our") collects, uses, and protects your personal information when you use our platform, website, or services.
We are committed to protecting your data, ensuring transparency, and complying with international regulations.
Compliance Standards
* PlugZ is not certified under SOC 2 or PCI DSS, and no audit is currently underway. We have built to those control frameworks and to GDPR and CCPA requirements from the start — GDPR and CCPA are laws we comply with, not certifications. We will state publicly if and when a formal audit begins.
Information We Collect
We collect the following types of information:
Account Information
- Name, email address, phone number
- Username, profile photo
- Date of birth and verification details
Transaction Data
- Product views, offers, bids, purchases, and sales
- Payment confirmations and transaction receipts
Device & Technical Info
- IP address, browser type, operating system
- Device ID, language, geolocation (when authorized)
Social Login
- Google, Meta (Facebook), X, or Apple login data
- Profile data including name, profile photo, email, and public metadata
Behavioral & Analytical Data
- Page visits, scroll behavior, click heatmaps
- Time spent on products, wishlist interactions, alert settings
- Interaction history with chat, drops, or games (e.g., CoinFlipZ)
Identity Verification Data
- Government-issued ID documents (e.g., driver's license or passport) and the information they contain
- A selfie photo or video captured during verification, including biometric identifiers derived from it
- Verification results and government watchlist and sanctions screening outcomes, including periodic re-screening
How We Use Your Data
We use your information to provide the best PlugZ experience:
Sharing Your Data
We share data only with trusted service providers — and each provider receives only the minimum information it needs to perform its service for PlugZ, never data outside its scope:
Payments
Shipping
Hosting
Verification
Identity Verification
Analytics
Our Promise
We do not sell your personal data to third parties.
We never sell metrics, brand data, or resale insights under any circumstance.
Identity verification is performed by specialized providers acting on our behalf. These providers may also use verification data to maintain and improve their own verification and fraud-prevention services, including shared anti-fraud networks, as described in their privacy policies.
Cookies & Tracking
We use cookies and tracking tools to enhance your experience:
What We Track
Your Control
You can manage cookies in your browser settings and control what data we collect.
Text messages (SMS)
What we send, how you turn it on, and how you stop it
PlugZ sends text messages only about your own account activity. We never send marketing or promotional text messages, and we never buy, rent, or import phone number lists.
The only messages we send
How you turn it on
Text messages are off by default. You can turn them on in Account → Notification Settings by entering your mobile number and ticking a consent box that is never pre-ticked. We then send a single verification code to that number; until you enter that code, the number is not enabled and receives nothing else.
The exact wording you agree to
How you stop it
Reply STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT to any message and we stop immediately — no reply needed from you and no confirmation step. Reply HELP or INFO and we return our support contact details. You can also switch text messages off at any time in Account → Notification Settings, which has the same effect.
Frequency and cost
Message frequency varies, because every message is triggered by something you did — there is no schedule and no campaign. Message and data rates may apply, depending on your mobile plan. PlugZ does not charge you for text messages.
What happens to your number
Your mobile number is used to deliver these messages and to prove it belongs to you. We pass it to our messaging carrier solely to deliver the message. We do not sell it, we do not share it with advertisers, and we do not use it to build audiences.
Your Rights
Under GDPR, CCPA, and applicable laws, you have these rights:
Access your data
View all data we have about you
Correct inaccurate information
Update or fix your personal data
Request deletion of your data
Delete the data we are not required to keep
Export your data (portable format)
Download your data in standard format
Opt-out of marketing communications
Stop receiving promotional emails
Limit or object to automated profiling
Control AI-based suggestions and analysis
Manage All Privacy Settings
Access the complete Privacy & Compliance section in your account settings
Privacy & ComplianceData Retention
We retain your data only as long as necessary:
Retention Purposes
Deletion Policy
If you request deletion, we act on it within 30 days: your profile, contact details, preferences, notifications, and devices are permanently erased, and your identity is removed from remaining records by replacing it with a non-reversible cryptographic pseudonym. Records we must keep — identity-verification (KYC/AML) and sanctions-screening records, transaction and payout ledgers, dispute evidence, and audit trails — are retained in that pseudonymized form for up to 7 years, on grounds of legal obligation, fraud prevention, and the integrity of other users' records. A deletion request may be paused or declined while an active escrow, dispute, legal hold, or anti-money-laundering hold applies; we will tell you the reason.
Biometric Data
How we handle biometric identifiers collected during identity verification:
What We Collect
When you verify your identity, we capture a selfie photo or video and a facial scan is derived from it to confirm that you match your ID document and are physically present.
Notice & Consent
We do not sell, lease, trade, or otherwise profit from biometric data, and we do not disclose it except to complete your verification, prevent fraud, or as required by law.
Retention
Biometric identifiers are retained by our verification provider only as long as needed for verification and fraud prevention, and no later than three (3) years after your last interaction with PlugZ, unless a longer period is required by law.
CoinFlipZ Data Retention
Special retention policies for arbitration data:
Extended Retention
Why Permanent Retention?
CoinFlipZ arbitration data is retained for as long as necessary due to the binding nature of confirmed results and legal compliance requirements.
This ensures system integrity, enables dispute resolution, and provides permanent audit trails for legal purposes. If you exercise your right to erasure, these records are not deleted — every reference to your account is instead replaced with a non-reversible pseudonym.
Personal Data
User IDs: Retained according to account lifecycle
IP addresses: Retained for 2 years for security
Technical metadata: Retained for 1 year
Learn More
For complete details about CoinFlipZ data handling, consent processes, and binding results, see our:
CoinFlipZ PolicyChildren's Privacy
18+ Platform
PlugZ is not intended for individuals under 18 years old.
We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it immediately.
Data Security
We use industry-standard security measures:
AES-256 encryption for sensitive data
Sensitive personal and payment data encrypted at rest
TLS 1.3 for data in transit
Latest secure transmission protocol
Network firewalls, segmentation, and 24/7 monitoring
Continuous security surveillance
Regular security testing
Regular security audits and compliance
We apply GDPR-level protections to your personal data wherever it is processed, and we use appropriate safeguards such as Standard Contractual Clauses for any cross-border transfers.
International Users
Global Access, EU Data Protection Standards
We apply GDPR-level protections to your personal data wherever it is processed, and we use appropriate safeguards such as Standard Contractual Clauses for any cross-border transfers.
We apply the same privacy protections regardless of your location.
Changes to This Policy
We may update this Privacy Policy from time to time.
If we make material changes, we will notify you by email or through a platform notice.
Your continued use of the platform after such changes constitutes your acceptance of the revised policy.
Contact Us
For questions or concerns regarding this Privacy Policy or your data rights:
Thank you for trusting PlugZ
We protect your data with the same care we use for verification evidence.