Privacy Policy

Rizzle’s Services

Last Updated: October 13, 2026

This policy explains what information Rizzle’s Services collects on rizzlesservices.com, in our Discord server and through the Rizzles NFA Loader, why we collect it, who receives it and how long we keep it. Rizzles Optics has its own Privacy Policy at rizzlesservices.com/optics/privacy, which covers the Optics app. We do not sell your personal data and we do not show ads.

1. Who we are

Rizzle’s Services runs the store and decides how the information described here is used. Contact: [email protected], or open a ticket in our Discord server.

2. Information we collect

Account: email address, a hashed password, whether your email is verified, store balance, date created and last IP address. If you log in with Discord: your Discord ID, username, avatar and Discord email.
Orders and payments: product, amount, payment method, discount code, status, time, your IP address at checkout, the approximate location of that IP address (country, and city when Cloudflare provides it), a fraud risk score, and the card brand and last four digits of the card from Stripe. We never see or store your full card number.
Delivered products: the account logins, keys and Steam Guard files we deliver to you (see section 5).
Website visits: for each page visit we log your IP address, the page, approximate location (country, and region and city when Cloudflare provides them), your browser and device (User-Agent) and the page you came from. When you are signed in we also keep the IP addresses you use with your account.
Discord and tickets: your Discord ID and username, your ticket answers and messages, attachments, ratings, ticket transcripts, warnings, bans, and which invite you joined with.
Reviews and offers: the name you type, rating and comment of a review (shown publicly), and offers you make on listed accounts.
Alerts: your email address if you sign up for restock alerts, and your Discord ID if you ask for stock alerts.
NFA Loader: a hashed loader key linked to your account, the email on your download link, IP addresses, the loader version, and a log of what you do with it (key created, downloads, update checks and replacement requests).
Fraud and abuse: banned emails and IP addresses, chargeback records, replacement counts, the comparisons described in section 3, and records of blocked scanners and bots (IP address, page, browser).
A small pop-up on the site shows recent purchases with the product name, the buyer's country and how long ago it happened. It shows no name, email, price or city.
Our staff can see your account, orders and delivered details, and can view the site as you see it, to help you.

3. How we use it

To run your account, take payments, deliver and replace products and give support.
To prevent fraud, chargebacks, ban evasion and abuse. This includes automatic bans after a payment dispute (Terms of Service section 6) and comparing the email, IP address, and card brand and last four digits of new orders with banned accounts.
To keep the site secure and working, count visits and see where visitors come from.
To send service emails (receipts, delivery, password resets) and the alerts you asked for.
To keep records for accounting, disputes and legal duties.

We use IP addresses and location for security, fraud prevention and basic statistics. We do not use your data for advertising. We do not respond to Do Not Track signals.

4. Who receives your information

Stripe: card payments. We send your email, product names and amounts. Stripe collects your card, billing details and IP address itself.
NOWPayments: crypto payments. We send the amount, product text and an order reference, not your email or IP address.
Google: we send all our emails through Gmail, including emails with delivered logins, keys and links, so copies stay in your mailbox and in our sent mail. Our pages load fonts from Google Fonts, which sees your IP address and browser.
Cloudflare: delivers and protects our site and sees all traffic to it, including your IP address. It also tells us the approximate location of each visit, so we do not send your IP address to any location service.
Discord: login, our Discord server, bots and direct messages. Staff alert channels in Discord receive customer details such as email, Discord username, order and payment summary (card brand and last four digits, amount, discount code) and the IP address and browser of blocked visitors.
Anthropic: our AI assistant in tickets (see section 6).
Our suppliers (nfa.pub and LZT Market): we send the order, account and product details needed to buy or replace an account. We do not send your name, email or IP address.
Our hosting provider: one server holds our databases, logs and backups.
Valve (Steam): if you use the NFA Loader, you sign in to Steam directly from your PC. Your Steam login details stay on your PC and go to Valve, not to us.

We may also share information when the law requires it or to deal with fraud or abuse. These providers have their own privacy policies.

5. Delivered logins and security

When you buy an account or key, we keep a copy of what we delivered (username, password, email and email password, Steam Guard files, keys) so we can show it in My Orders, resend it and replace the account. The passwords and Steam Guard secrets we keep for delivered accounts are stored encrypted in our database, and the encryption key is kept apart from the database and from our backups. Other delivery details (for example NFA account details, product keys and ticket history) are stored in readable form. What we delivered is also emailed to you through Gmail, so copies stay in your mailbox and in our sent mail. Our staff can see it. Logins that staff post in a ticket are saved in the ticket history and transcript. Change the password and security details of any account as soon as you receive it.

Steam Guard files (.maFile) are delivered through a download link with a long random address. Anyone who has the exact link can download the file, so keep it private.

We protect our service with HTTPS, hashed account passwords, encryption of stored delivery passwords and secrets, a server that accepts web traffic only through Cloudflare, key-only administrator login with automatic blocking of repeated failed attempts, access limits on our admin pages, and file permissions that restrict database and backup files to administrators. Our server logs are set up to leave out email addresses, passwords and similar details. No system is 100 percent secure, and we cannot promise that your information will never be accessed without permission. If a breach affecting your information happens, we will tell you as the law requires.

6. Discord, tickets and bots

Our Discord bots can read messages in our server, which we need for tickets, moderation and spam control. They keep ticket details, messages, attachments, ratings, HTML transcripts, warnings, bans, invite information and giveaway and server-tag records. Transcripts are posted to staff, sent to you, and can be opened by anyone who has the link (a long random address, no login needed), so do not share it.

AI assistant: an automated assistant provided by Anthropic can reply in tickets. To write a reply, the text of the ticket (your answers and messages, staff messages and, if an account was delivered in the ticket, its login details) is sent to Anthropic. Staff can switch it off for a ticket and you can type stop ai to ask for a human. Do not type anything into a ticket that you do not want shared this way.

7. Cookies

We set a small number of essential cookies and use browser storage for your login and cart. We do not use advertising or analytics cookies. See our Cookies Policy for the list.

8. How long we keep it

Account, order, payment, delivered-login, review and ban records: kept while your account exists and afterwards for as long as we need them for warranty, disputes, fraud prevention, accounting and legal reasons, or until you ask us to delete them (section 9). The IP address stored with an order is kept with the order.
Website visit logs (IP address, page, country, browser, referring page): 90 days, then deleted automatically.
IP addresses linked to a signed-in account: up to 12 months, then deleted automatically.
Records of blocked scanners and bots: 30 days.
Support tickets, transcripts and Discord moderation records: kept until we delete them or you ask us to.
NFA Loader events: update checks 30 days and other events 90 days, except downloads, replacements and key events, which are kept (with IP addresses) without a set end date.
Password reset links: valid for 1 hour, stored only as a one-way hash, and the record is deleted within a day after it expires.
Server logs: web server request logs leave out email addresses and are kept for about 14 days; application logs are kept for about 7 days.
Backups: nightly copies are kept for about 2 weeks, and the website keeps its own daily database copies for 7 days. Deleted data can stay in backups until they expire.

9. Your choices and requests

You can ask us to show you the information we hold about you, correct it, or delete it. Email [email protected] or open a ticket in our Discord server from the account or email you used. We may ask you to prove the account is yours. We aim to answer within 30 days.

Deleting your account ends your access to your orders, replacements and warranty. We may keep what we need for fraud prevention, chargebacks, tax and accounting, and legal claims, including banned email and IP records and order records. Deleted data can stay in backups for up to about 2 weeks.

You can unsubscribe from alerts with the link in the email or by asking us. You can clear cookies and site data in your browser at any time.

If your local law gives you more rights, contact us and we will deal with your request as that law requires.

10. Children

Our services are for people who are at least 18, or who have permission from a parent or legal guardian. They are not meant for children under 13, and we do not knowingly collect information from them. If you think a child has given us information, contact us and we will delete it.

11. International transfers

Our server and our providers (including Stripe, Cloudflare, Google, Discord and Anthropic) may store and process information in countries other than yours, including the United States.

12. Changes

We may update this policy. The date at the top shows the latest version.