1. About this notice
This notice adds to our privacy policy. It applies to you if you joined the Operator Pass waitlist, buy an Operator Pass, get a pass from someone else, turn on the pass that comes with Visionary, choose to appear on the Operators' wall or are listed in a yearly Operators list. It also applies to anyone whose name a buyer puts on an Operator certificate, and anyone who leaves Fluxer Labs or is removed from it.
Fluxer Platform AB is the controller of this data. Everything else in the privacy policy applies here too, including how to contact us, our legal bases, where data is kept and transferred, how we protect it, your rights and how we make changes.
2. Operator Pass waitlist
If you joined the Operator Pass waitlist, we keep your email address, the language of the page you used, the IP address you joined from, the country that we estimate from that IP address, and when you joined, confirmed or unsubscribed.
We also keep your answer to the question about how the early bird price feels to you, the currency of the price you saw, which descriptions of yourself you picked, which things that come with the pass you picked as most important, and anything you wrote in your own words. All of this is part of your entry, and we delete it together.
Joining the waitlist was optional and rested on your consent (legal bases), and we keep the IP address you joined from as a record of that consent.
We sent one email to confirm your email address and, if you confirmed it, one email when sales opened. The waitlist closed then, and we send no more waitlist emails.
3. Operators' wall
If you have an Operator Pass and choose to be on the Operators' wall, anyone can see the name and avatar you chose. Unless you hide the count, they can also see one number, the sum of the valid passes you have and those you bought and passed on. If we take a name or avatar off the wall, it shows the word "Operator" and the default avatar instead, as section 3.1 of the Operator Pass terms says.
We order entries on the wall by the earliest date among the passes we count for you. For a pass you bought, that's the day we first delivered it to you. For a pass you received from someone else, it's the day the pass arrived in your account. For the Operator Pass that comes with Visionary, it's the date on which you got Visionary.
We keep a record of who first bought each pass and who holds it now so we can work out counts and places on the wall. We don't publish who gave a pass to whom.
We keep our own copy of every name and avatar you send for the wall, whether it comes from checkout, your settings or a change to your Fluxer profile while your listing follows it. We never change a stored copy, and for each copy we keep when you sent it and any decision we made about it, who made it and why.
The wall only ever shows these stored copies, never your live profile. You can stop your listing from following your Fluxer profile in your settings.
We keep the copies and history to check names and avatars, explain decisions, handle appeals and see past versions of the wall. This rests on our legitimate interest in moderating the wall and being accountable, and you can object.
If a business asks us to list it with its company name and logo, this section applies to that name and logo as it does to a name and avatar, including the versions we make from them to fit the wall, such as a shortened name or a resized logo.
A company name or logo is usually not personal data, but a sole trader's name or a logo that shows a person is, and we treat them all the same way. We handle the email you send with the request like any other support message.
Your listing rests on our legitimate interest in showing who supports Fluxer and chose to be listed, and you can object. You can leave the wall at any time in your settings.
Your name goes on the yearly Operators list only if you are listed on the wall and turn on "Add my name to the yearly Operators list" in your settings, which is off by default. Each list uses the name on your wall listing when we make that list, and anyone can see it in a release's notes and in a file in the Fluxer source code repository. Listing your name rests on your consent, and turning the setting off keeps you off later lists.
If you ask us to erase your name from a list, the Operator Pass terms say what we remove, and what can't be taken back once a list is published.
4. How long we keep it
We delete an Operator Pass waitlist entry 30 days after we send the email that says sales are open, 30 days after you unsubscribe or our waitlist emails to the address bounce, or 7 days after you sign up if you never confirm your email address. We delete any entry that is still on the list 30 days after the early bird price ends.
We keep the copies of names and avatars for the Operators' wall while you are on the wall, and we delete a copy we declined 1 year after the decision.
When you leave the wall, delete your account or ask us to erase the copies, we remove your listing at once, and its avatar stops loading from our servers. We delete the copies 60 days later, once the time to appeal our decisions about them under section 6.2 of the terms of service has passed. If an appeal or a dispute is still open then, or the law still requires us to keep them, we keep them only until that ends.
We keep a separate record of each wall decision, and that record doesn't include your name or avatar. If you leave the wall but still have a pass, those records stay linked to your account for as long as you have both a pass and an account, so that we can handle an appeal or a new listing with the earlier decisions in view.
Once you have no pass left or have deleted your account, and 60 days have passed since you left the wall, we also remove your account identifier from those records.
We keep certificate and checkout records and the Fluxer Labs records for the times that sections 5 and 6 of this notice give for each of these records.
5. Operator certificate
When you buy an Operator Pass, we create your certificate with one page for each pass. For each page, we keep the name typed at checkout, its number, the payment time, the PDF file and its fingerprint, and the random code in its link. If you put someone else's name on a page, that name is on the certificate and in our records. We check the names before you pay, as section 2 of the Operator Pass terms says.
Creating your certificate rests on contract necessity. When you put someone else's name on a page, using their name rests on our legitimate interest in putting it on the certificate you asked for, and that other person can object to this.
We keep a copy of the PDF file on our servers so that you can open it again from your settings later. This rests on our legitimate interest in letting you get your certificate back if you lose your own copy, and you can object to this.
Each page has a private link on fluxer.com, made from a long random code that can't be worked out from the certificate number. Anyone with the link can see the certificate number, the name on the page, the date and time of payment, when that copy was made and whether the page is still valid, and can open the PDF file.
The page that the link opens shows nothing else about you or your account, and we ask search engines not to list it. You decide who you give the link to, and you can replace it with a new one in your settings at any time, which makes the old link stop working.
The link rests on contract necessity, because it comes with your certificate. When the page has someone else's name, showing it through the link rests on our legitimate interest in letting you prove and share the certificate that you asked for, and that person can object to this, as this section describes for names.
When someone opens a link, we don't keep their IP address with the certificate, and we don't show you or anyone else who opened it. We use it only to limit how often links can be opened, which rests on our legitimate interest in keeping the service working, and we keep it in security logs only as section 7.4 of the privacy policy says.
The certificate number, the payment time and the fingerprint are bookkeeping records of what we delivered, and we keep them as long as section 7.4 of the privacy policy says we keep payment records. When your account is deleted, we delete the names and our copy of the PDF file, and every page's link stops working.
If a page is canceled because you withdrew from the pass, or because the payment for it was refunded or reversed, your settings leave that page out and its link shows only that the page was canceled, with its number and the date and time of payment. We keep its name and PDF file as evidence in case the payment is disputed. This rests on our legitimate interest in answering payment disputes, and you can object.
We delete the name and PDF file 2 years after the payment, or when any open payment dispute about the purchase has ended if that's later. If your account is deleted before then, we delete them along with the rest of your account data.
At checkout we also keep a record of your choices. It has the text of the checkbox where you asked for delivery right away, exactly as you saw it.
It also has the date and time when you checked it, when you confirmed that you're 18 or older or that you have a parent's or guardian's permission, the version of the Operator Pass terms that you agreed to, your IP address and your browser's user agent (the text your browser sends to say which browser and system it is).
We keep it to show what you confirmed, such as asking for delivery right away and giving up your right of withdrawal, and to answer payment disputes. We share it with Stripe, and with your bank or card company if we contest a payment dispute.
Except for your IP address and user agent, we keep everything in this record with the payment records, for as long as section 7.4 of the privacy policy says we keep payment records. These support our bookkeeping of the sale, so keeping them rests on our legal duty to keep bookkeeping records and on contract necessity.
Keeping your IP address and user agent rests only on our legitimate interest in showing that you asked for delivery right away and in answering payment disputes, and you can object. We keep them for 2 years after the payment, or until any open payment dispute about the purchase ends if that's later, and then delete them.
If you buy for a company in Brazil and enter its CNPJ, we keep it with the payment records for as long as section 7.4 of the privacy policy says. We share it with Stripe, and with your bank or card company if we contest a payment dispute. The CNPJ shows that you bought for a company, and that decides whether the Brazilian right of withdrawal in section 12 of the Operator Pass terms applies to your purchase.
When you withdraw from a pass, we keep a record of the withdrawal with the name you gave us when you withdrew, when we received it and how you sent it. The record shows that you withdrew and when, and it supports our refund and any credit note. It rests on our legal duties under consumer and bookkeeping law, and we keep it with the payment records for as long as section 7.4 of the privacy policy says.
While you have a pass, you can ask us for a new copy with your new name and the same number and date, as section 3 of the Operator Pass terms says. If we made a mistake in your certificate, we send you a corrected copy, as section 6 says. Your settings and the page's link then give you the new copy, and each earlier copy, including its name and PDF file, stays in our records until your account is deleted.
If someone whose name you put on a page objects and the objection succeeds, we ask you for another name for that page and give you a new copy with it. We then delete that person's name and the PDF file of every earlier copy of the page. The number, the payment time and the fingerprint stay as bookkeeping records.
When you turn on the Operator Pass that comes with Visionary, we create a certificate page with the name you type for it and the date on which you got Visionary. The certificate rests on contract necessity, because the pass comes with Visionary.
We keep a record of the checkbox that you checked, when you confirmed your age, the version of the terms that you accepted, your IP address and your browser's user agent. We use this record only for our legitimate interest in being able to show that you accepted the Operator Pass terms, and you can object to this.
We delete your IP address and user agent 2 years after you turned on the pass, or with your account if that's sooner, and the rest of the record with your account.
6. Fluxer Labs
The pass comes with a place in the Fluxer Labs community, as section 3 of the Operator Pass terms says. When we deliver your certificate, or when a pass someone passed on to you arrives in your account, we add your account to Fluxer Labs with the Operator role. This comes with the pass, so it rests on contract necessity.
You can leave Fluxer Labs at any time. We record when we added you, and when anyone leaves Fluxer Labs or is removed from it, we record when that happened. We check that record before we add anyone with a pass, so we won't add you again after you leave. Our record of people who left goes back to November 1, 2025.
If you left before that and we add you again, you can leave again, and then we won't add you after that. The record rests on our legitimate interest in not adding you back, and you can object to this. We keep it until your account is deleted.
Soon after we add you, the Fluxer system account mentions you by name in a welcome message in #operators, so other members can see that you have a pass. We welcome each person only once, and the message stays in #operators like any other.
You can turn the welcome off at checkout, when you accept a pass or turn on the pass that comes with Visionary, and in your settings until it is sent. The welcome rests on our legitimate interest in greeting new Operators, and you can object.