1. Introduction
At FireflyProtector, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website fireflyprotector.xyz and use our services.
2. Information We Collect
Personal Data
We may collect personal information that you voluntarily provide to us when you register for the website, express an interest in obtaining information about us or our products and services, when you participate in activities on the website (such as posting in forums), or otherwise when you contact us.
The personal information that we collect depends on the context of your interactions with us and the website, the choices you make, and the products and features you use. The personal information we collect may include:
- Username and password
- Email address (for verification and account recovery)
- Profile images (if uploaded)
- IP address (for security and anti-abuse purposes)
- Basic device signals (see section 6), only where permitted
Uploaded Files
When you use our obfuscation or deobfuscation tools, you upload files to our servers. These files are processed automatically and are stored temporarily to allow you to download the result. We do not permanently store your source code. Temporary files are automatically deleted after a short period (typically 1 hour).
3. How We Use Your Information
We use the information we collect or receive:
- To facilitate account creation and logon process.
- To protect our services (e.g., preventing spam, abuse, and DoS attacks).
- To provide and maintain our services (obfuscation/deobfuscation).
- To manage user accounts.
- To respond to user inquiries/support requests.
4. Disclosure of Your Information
We may process or share your data that we hold based on the following legal basis:
- Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose.
- Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
5. Data Security
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
6. Cookies, Device Signals and Bot Protection
Strictly necessary storage
We only set a small number of strictly necessary cookies and entries that keep the service working and secure. These do not require consent:
- Session cookie (PHPSESSID): set only when you log in, submit a form, or use an interactive tool. Purely informational pages work without it.
- Remember-me cookie (ff_remember): only set if you tick "Remember me for 30 days" on the login form, and deleted when you log out.
- Protection cookies (__Host-ff_challenge / __Host-ff_clearance): set by our own bot-protection service. They verify that a real browser is talking to us and are technically required to keep the service secure.
- Consent note (ff_consent_v1): your privacy choice from the banner is stored in your browser's local storage so we do not have to ask again.
Device signals for fraud prevention
To detect automated abuse (bots), our security script can read basic device signals such as screen size, timezone, language, browser plugin count, and a canvas/WebGL rendering hash. This processing is based on our legitimate interest in protecting the service (Art. 6(1)(f) GDPR).
For visitors from the EU/EEA, the UK, and Switzerland, these signals are only read after you consent via the banner, because reading information from your device requires consent under Section 25 TDDDG. Choosing "Essential only" keeps every feature of the site fully usable; automated requests are then evaluated with server-side signals only. You can change your choice at any time via the "Privacy settings" link in the footer, or by clearing this site's data in your browser.
Cloudflare Turnstile
Forms on this site are protected by Cloudflare Turnstile, a privacy-friendly captcha alternative that does not use tracking cookies. Data is processed by Cloudflare Germany GmbH on our behalf (Art. 28 GDPR data processing agreement). See Cloudflare's privacy policy for details.
7. Third-Party Services
This site displays no advertising and loads no advertising or tracking scripts. Third parties involved in operating the site are our hosting provider (servers located in Germany) and Cloudflare (Turnstile form protection, see section 6).
8. Contact Us
If you have questions or comments about this policy, you may contact us via our Discord server or email at [email protected]. Operator and contact details are available in our Impressum.