Privacy Policy

Effective Date: 24 June 2025

LSCAKE “we”, “our”, “us”) values your privacy and commits to protecting the personal information you provide when using www.lscake.xyz (the “Site”). This Policy explains what data we collect, why we collect it, and the choices you have.

1. Information We Collect

We collect the following categories of information:

• Account & Contact Data – username, email address, password (hashed), preferences.
• Payment & Subscription Data – last four digits of card, billing country (stored by our PCI-compliant processor).
• Technical & Usage Data – IP address, device type, operating system, browser, referring URL, pages viewed, session duration, clickstream, search terms.
• Cookies & Similar Technologies – small data files (see § 7).
• User-Generated Content – comments, favorites, playlists, searches.

2. Why & On What Legal Basis We Process Data

Under the GDPR we rely on the following bases:

• Contract – to provide the services you request.
• Legitimate Interests – to improve the Site, prevent fraud, keep it secure, and show non-intrusive advertising. We balance these interests against your rights.
• Consent – for optional cookies, marketing emails, or when you explicitly opt in.
• Legal Obligation – to comply with applicable laws (e.g., age verification, accounting).

3. How We Use Your Information

1. Operate, maintain & personalize the Site.
2. Provide customer support and respond to inquiries.
3. Process payments & manage subscriptions.
4. Monitor analytics, detect abuse, and enforce our Terms.
5. Display contextual advertising and recommended content.

4. Sharing & Disclosure

We do not sell your personal information. We share it only with:

• Trusted service providers (hosting, CDN, analytics, payment processors, anti-spam tools) bound by confidentiality.
• Law enforcement or regulators when required to comply with legal process.
• Another entity in connection with a merger, acquisition, or asset sale (you will be notified).

5. International Data Transfers

We are headquartered in Lesotho. Your data may be processed outside your home jurisdiction. When transferring data internationally we rely on:

• EU Standard Contractual Clauses (SCCs) or UK Addendum;
• adequacy decisions; or
• your explicit consent when applicable.

6. Data Security

We employ TLS encryption, firewalls, regular security audits, and the principle of least privilege. Despite our efforts, no internet transmission is entirely secure.

7. Cookies & Tracking Technologies

We use:

• Essential Cookies – required for login, load-balancing, and fraud prevention;
• Analytics Cookies – e.g., Google Analytics 4 to understand traffic;
• Advertising Cookies – to limit ad frequency and measure performance.

You can disable non-essential cookies via the banner below or in your browser settings.

8. Do Not Track Signals

LSCAKE does not respond to browser “Do Not Track” signals, but you may use cookie controls described above.

9. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or allowed by law (e.g., tax records kept for 7 years).

10. Children & Age Restrictions

This Site is intended strictly for adults 18 + (or the age of majority in your jurisdiction). We do not knowingly collect information from anyone under that age. If you believe we have unintentionally received data from a minor, contact us to delete it.

11. Your Privacy Rights

Depending on where you live, you may have the right to:

• Access, correct, or delete your personal data;
• Object to or restrict processing;
• Data portability;
• Withdraw consent at any time;
• File a complaint with a supervisory authority.

California (CPRA): you can request to know, delete, correct, or limit sharing of your personal information. Click the link in the footer to use our self-service form.

12. Do Not Sell or Share My Personal Information (California & CPRA)

We do not sell your personal data for money, but we may share identifiers (like cookies) with advertising partners. California residents can opt out at any time via the footer link or by emailing privacy@lscake.xyz.

13. Contact Us

Data Controller / Website Operator
LSCAKE
Maseru
Lesotho
Email: privacy@lscake.xyz

14. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be announced on this page or via email. The “Effective Date” at the top shows when the last revision occurred.