Policy changelog
A record of significant changes to our terms of service, privacy policy, and community guidelines.
Last updated on August 12, 2026.
Effective date: 14 August 2026
This page records significant changes to our terms of service, privacy policy, community guidelines, and related policies. Current versions are linked in the footer.
12 August 2026
We rewrote our policies to be shorter and easier to read. Nothing in this update reduces a commitment we had already made to you, adds a new purpose for your personal data, or changes how long we keep it.
25 April 2026
The privacy policy was updated to explain that phone verification is used for suspicious registration checks, not as a general identity or account-linking system. Phone numbers used for verification are not linked to Fluxer accounts or user IDs, and a successful verification stores only a has_verified_phone account flag.
To prevent reuse, an encrypted marker is kept for about 30 days, allowing the same number to verify at most twice in that period, with the encryption keys rotated roughly every 30 days. SMS 2FA is not available for accounts registered on or after 25 April 2026.
18 April 2026
The privacy policy was updated to match current providers, hosting, retention, and content safety practices. None of it added a new purpose for personal data or a new category of data leaving Fluxer.
Cloudflare, OVHcloud, Hetzner, Better Stack, and Sentry were removed from the provider list because they no longer process personal data, and Porkbun because it only handles domain registration. The separate Backblaze entry went too: off-site backups are still kept for disaster recovery, but they're encrypted with keys only we hold, so the provider can't read, index, or otherwise process them and isn't a sub-processor under GDPR Article 28. IPinfo was limited to network risk checks that use only the IP address, with no account context.
The update recorded that stored data and user files are hosted with Vultr in New Jersey, that calls may be relayed through Vultr locations worldwide, and that Bunny.net delivers user content on fluxerusercontent.com. It also set the 24-hour disaster recovery window for deleted attachments and the one-year limit for reported content snapshots, and confirmed that content safety classification never trains an AI model.
2 April 2026
The terms of service were updated to say Fluxer must not be relied on for military, emergency response, healthcare, utilities, sanitation, transport, or other safety-critical or critical infrastructure use.