Privacy Policy
Last updated 26 August 2026
Sumit Sharma operates flaghold.lol. This explains what we collect and why. The short version: we collect as little as we can, we never see your card details, and we do not sell anything to anyone.
What we collect
| Data | Why |
|---|---|
| Brand name, website link, brand colour | This is your placement. It is public by design. |
| Amount paid and the region | To rank placements and show the public history. |
| Email address (optional) | Receipt, and the private link for managing your placement. |
| Payment reference from the provider | To match a payment to a placement and handle refunds. |
| Click counts per placement | Aggregate totals only. We do not build visitor profiles. |
What we never collect
We do not take card numbers, UPI credentials or bank details. Payment is handled entirely by our payment providers on their own systems. We receive only a reference and a status. There are no accounts and no passwords.
What is public
Your brand name, link, colour, amount and placement date are shown publicly — that is the product. Your email address is never shown publicly and is not shared with other users.
Who we share with
- Our payment providers, to take payment and process refunds.
- Our hosting and database providers, who store the data on our behalf.
- Anyone we are legally required to disclose to.
We do not sell personal data and we do not run advertising trackers.
Cookies
We do not use advertising or tracking cookies. Our payment providers may set cookies of their own during checkout, governed by their policies.
How long we keep it
Placement records are kept for as long as the board exists, because the public history is part of what you bought. Email addresses are kept while your placement stands and for 12 months after, then deleted. Payment records are kept as long as tax law requires.
Your rights
Email sumitsharma96@hotmail.com to access, correct or delete your data, and we will respond within 30 days. We can remove your email address and take your placement down. We may keep the fact of the transaction where the law requires it.
Security
Data is transmitted over TLS and held in access-controlled managed databases. No system is perfectly secure, but we do not hold payment credentials, so the worst case is limited.
Children
The service is not intended for anyone under 18 and we do not knowingly collect their data.
Contact
Sumit Sharma. Email sumitsharma96@hotmail.com.