Privacy Policy

FLELKT ("we", "our", "the project") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and the choices you have regarding your information when you use flelkt.com or join the FLELKT whitelist.

We collect the minimum data necessary — only what is required to operate the whitelist and referral system.

When you connect your X (Twitter) account to join the whitelist, we collect:

• X Username — your public @handle
• Profile picture URL — your public X avatar (a URL pointing to X's CDN)
• Whitelist join timestamp — the date and time you registered
• Referrer — the username of the person who referred you, if any
• Referral count — how many users you have referred

We do not collect your email address, real name, phone number, location, DMs, or any private X account data. We use OAuth 2.0 read-only scope — we cannot post on your behalf.

The data we collect is used exclusively for:

• Operating and displaying the FLELKT whitelist
• Tracking referral counts and assigning referral rewards
• Preventing duplicate registrations
• Communicating collection updates via X (we follow you publicly, never via DM without consent)

We do not use your data for advertising, profiling, or any purpose unrelated to the FLELKT collection.

Connecting your X account uses X's official OAuth 2.0 protocol. This means:

• You are redirected to X's own login page — we never see your X password
• We request only read-only public profile access (username and avatar)
• You can revoke our access at any time from your X Connected Apps settings
• Revoking access does not automatically delete your data from our whitelist — contact us separately for deletion

Whitelist data is stored in a private Google Spreadsheet accessible only to the FLELKT team. The sheet is not publicly accessible and is protected by Google's security infrastructure.

We do not use third-party analytics services (e.g. Google Analytics, Mixpanel) on flelkt.com. No tracking pixels are embedded on the site.

We do not sell, rent, or trade your personal data to any third party.

We may disclose data if required to do so by law, court order, or governmental authority. We will notify you of such disclosure where legally permitted.

Your whitelist data is retained until the FLELKT collection launch is complete and all whitelist allocations are finalised. After that, the data will be anonymised or deleted.

You may request deletion of your data at any time before the launch — see the Contact section below.

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (right to erasure)
• Restrict or object to processing
• Data portability — receive your data in a structured format

To exercise any of these rights, contact us via X at @flelkt with the subject "Privacy Request". We will respond within 30 days.

flelkt.com uses a single session cookie set by NextAuth to maintain your login state after connecting your X account. This cookie:

• Contains no personally identifiable information — only an encrypted session token
• Expires when you close your browser or sign out
• Is strictly necessary for the whitelist to function and is not used for tracking

We do not use advertising cookies, analytics cookies, or any third-party cookies.

For privacy questions, data deletion requests, or any concerns, please contact the FLELKT team via X at @flelkt.