How KandyDrops handles your data

This notice applies to KandyDrops websites, authenticated dashboard experiences, creator drop browsing, purchases, support interactions, and related services available at https://kandydrops.com.

KandyDrops is intended for adults only. Registration checks age eligibility before an account can be activated.

• Account data: email address, display name, username, avatar, date of birth if provided, role, and profile settings.
• Service activity: unlocked drops, balances, check-ins, task progress, referrals, notifications, and content-viewing activity.
• Commerce data: Gum Drop purchase records, package details, transaction timestamps, payment status, and derived revenue or fee summaries. Payment cards are processed by PayPal, not stored by KandyDrops.
• Optional analytics data: page paths, clicks, scroll depth, viewer performance, device dimensions, and event telemetry when you allow analytics.
• Security data: abuse-prevention events, protection warnings, fraud signals, and session-related records needed to protect creators and the platform.
• Notification data: browser permission state, push-token data, and notification preference settings when reminders are enabled.

• To perform the service: create accounts, authenticate users, deliver drops, maintain balances, process check-ins, and support creator content access.
• To process purchases: verify Gum Drop transactions, record completed orders, and prevent duplicate or fraudulent payment captures.
• To secure the platform: detect abuse, enforce viewer protections, investigate suspicious activity, and maintain audit trails.
• To improve the product: analyze optional usage data, diagnose performance issues, and understand site flows when analytics consent is granted.
• To personalize optional features: improve recommendations or aggregated trend reporting only when the related privacy toggles are enabled.
• To meet legal and accounting obligations: retain records required for tax, payment, fraud, or dispute handling.

Some processing is necessary to provide the service you request, such as authentication, core security, payment verification, and required session storage.

Optional analytics and recommendation features rely on your choices. KandyDrops keeps those settings separated by purpose inside Account Settings so consent can be specific and easy to change.

• Anonymous product analytics: optional and off until you enable it.
• Account-linked analytics: optional and off until you enable it.
• Recommendations and anonymous trend reporting: optional and dependent on the related analytics settings.
• Global Privacy Control: if enabled in your browser and honored in settings, KandyDrops turns off optional analytics automatically.

You can withdraw optional consent at any time in Account Settings. Withdrawing consent does not turn off strictly necessary security and service-storage functions.

KandyDrops uses essential storage for sign-in, session continuity, fraud prevention, and security controls. Optional analytics cookies or storage are used only when analytics consent is granted.

The guest privacy banner lets visitors choose between essential-only use and optional analytics. Signed-in users can later review or change those choices in settings.

• Firebase / Google Cloud: authentication, Firestore data storage, hosting, storage, and messaging infrastructure.
• Google Analytics 4: optional analytics measurement when enabled.
• PayPal: payment processing and payment verification.
• Browser notification services: delivery support when push notifications are enabled.

We do not sell your personal data. We share data only as needed to run the service, process payments, protect the platform, or comply with legal obligations.

We keep account, transaction, and security information for as long as needed to operate the service, resolve disputes, prevent fraud, and satisfy legal or accounting obligations.

Optional analytics and telemetry are retained only as long as operationally necessary for performance, reporting, and abuse prevention, then deleted, aggregated, or de-identified where appropriate.

If you delete your account, KandyDrops removes or de-identifies data that is no longer required for fraud prevention, legal compliance, payment reconciliation, or recordkeeping.

• Access and portability: use the “Download My Data” action in Account Settings.
• Correction: update your profile details and settings from your dashboard.
• Withdrawal of consent: turn off optional analytics or recommendation settings at any time.
• Deletion: use the account deletion flow in the dashboard, or contact support if you cannot access your account.
• Complaints or requests: use in-site support from your dashboard.
• Supervisory authority: if you believe your data has been handled unlawfully, you may also raise a complaint with your local data protection authority.

For privacy, data-rights, or account-security questions, use in-site support.

If you are contacting us about a data request, include the email address tied to your account so we can verify the request safely before acting on it.