Last Updated: September 25, 2026
At Flutter Dragon, accessible from https://flutterdragon.com, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains in plain English what data we collect, why we collect it, how we use it, who we share it with, and what rights you have over it.
Flutter Dragon is an independent blog operated by Zakaria Ferzazi, a freelance Flutter developer based in Morocco. For any privacy-related question, you can reach the data controller at support@flutterdragon.com. This policy also applies to our iOS and Android mobile apps published under the “Flutter Dragon” name (currently TOEFL Exam Practice and FRM Exam Practice).
By using Flutter Dragon, you agree to the practices described in this policy. If you do not agree, please discontinue use of the site. For information on the rules governing your use of the site, see our Terms of Use.
1. Information We Collect
We collect only the information we need to operate Flutter Dragon, serve relevant advertising, and answer your inquiries. We collect personal information in the following ways:
A. Information you give us directly
- Newsletter signup: your email address (and optionally your name)
- Comments: your name, email, and the text of your comment
- Contact form: your name, email, and the contents of your message
- Account or app purchases (mobile apps only): a unique transaction ID and purchase receipt shared with us by Apple App Store or Google Play Store — we never see your card or bank details
B. Information collected automatically when you visit Flutter Dragon
- IP address (often truncated or anonymized by analytics providers)
- Browser type, version, and language
- Device type, operating system, screen size
- Pages visited, time spent on each page, scroll depth, and referring URL
- Approximate geolocation derived from your IP (country / city level)
- Date and time of your visit
C. Information from cookies and similar technologies
Cookies are small text files stored on your device. We, and the third parties we work with, use cookies, local storage, and web beacons for the purposes described below. See Section 5 for the full cookie breakdown and how to control them.
2. How and Why We Use Your Information
We process your personal data on the following legal bases: (i) your consent (e.g., newsletter signup, advertising cookies), (ii) our legitimate interest in running and improving Flutter Dragon (e.g., analytics, security), and (iii) contractual necessity for app purchases.
We use the information we collect to:
- Publish the blog content, comments, and newsletters you have signed up for
- Respond to your messages sent through the contact form
- Monitor and improve site performance, content, and user experience
- Detect spam, abuse, and security threats
- Measure how visitors find and use Flutter Dragon so we can publish better content
- Display advertising (including personalized ads where you have consented) and to measure ad performance
- Comply with our legal obligations and enforce our Terms of Use
We do not sell your personal information to anyone. We do not exchange email lists with third parties.
3. Advertising & Google AdSense
This section is required by Google and is essential for our participation in the AdSense program.
Flutter Dragon uses Google AdSense, a third-party advertising service provided by Google Ireland Limited (for EEA visitors) and Google LLC (for the rest of the world). Google AdSense may use cookies, web beacons, and similar technologies to:
- Serve ads on Flutter Dragon and across Google’s advertising network
- Determine which ads to show you based on your prior visits to this site or to other sites on the Internet
- Measure ad performance (impressions, clicks, conversions)
Personalized vs non-personalized ads
Where required by law (including the EU/EEA, the UK, and Switzerland), we will only show you non-personalized ads unless you have given valid consent for personalized advertising. Personalized ads are based on your browsing history across sites. Non-personalized ads are based only on general factors such as the topic of the page you are viewing.
Google’s use of cookies for advertising
Google, as a third-party vendor, uses cookies to serve ads on Flutter Dragon. Google’s use of advertising cookies enables Google and its partners to serve ads based on your visit to this site and/or other sites on the Internet.
How to opt out
You can opt out of personalized advertising by visiting Google Ads Settings (Google uses this preference across all sites that use Google ad services).
You can also opt out of some third-party vendors’ use of cookies for personalized advertising by visiting www.aboutads.info or www.youronlinechoices.eu.
More information from Google
- How Google uses data from partner sites: policies.google.com/technologies/partner-sites
- Google Advertising Principles: support.google.com/adwordspolicy/answer/1316548
EU/UK/Switzerland consent
For visitors in the EEA, UK, or Switzerland, we use a Google-certified Consent Management Platform integrated with the IAB Transparency and Consent Framework (TCF v2.2). You can change or withdraw your consent at any time via the “Privacy & Cookie Settings” link in our website footer.
4. Affiliate Links and CodeCanyon
Some links on Flutter Dragon are affiliate links to third-party products, primarily CodeCanyon templates via the Impact.com network. If you click an affiliate link and complete a purchase, we may receive a commission at no extra cost to you. The use of affiliate links does not affect the price you pay, and we only recommend products we have personally reviewed or researched.
The third-party merchant (CodeCanyon / Envato Market) processes the transaction independently and may set its own cookies when you follow an affiliate link. We recommend reading CodeCanyon’s privacy policy for details on what they collect.
For the full affiliate disclosure, see our Affiliate Disclosure.
5. Cookies and Tracking Technologies
We use the following categories of cookies. Strictly necessary cookies are always on. Everything else requires your consent where applicable law requires it.
A. Strictly necessary cookies
These cookies are required for the site to function and cannot be switched off. They include cookies set by WordPress for session, security, and comment functionality.
B. Performance / analytics cookies
- Google Analytics (GA4) — measures traffic, page views, bounce rate, and user behavior. We use IP-anonymization. You can opt out with the Google Analytics Opt-out Browser Add-on.
C. Functional cookies
Remember non-essential preferences such as the language of the site and whether you have already dismissed the cookie banner.
D. Advertising cookies
- Google AdSense — described in Section 3 above
- Possible Impact.com conversion tracking for our affiliate links
How to control cookies
In addition to the opt-out links above, you can block or delete cookies via your browser settings. Note that blocking strictly necessary cookies may break site functionality (comments, form submissions, etc.).
For an overview of the cookies used by Google AdSense, see policies.google.com/technologies/types.
6. Third-Party Services We Use
To operate Flutter Dragon we rely on a small number of trusted third-party providers. Each of them processes some of your data for the purposes described:
- Google AdSense — ad serving (see Section 3)
- Google Analytics (GA4) — traffic analytics
- WordPress.com / hosting provider — site hosting and storage
- Impact.com — affiliate link tracking for CodeCanyon commissions
- Email newsletter provider — to deliver the newsletter if you subscribe
- App Store / Google Play Store — for in-app purchase processing inside our mobile apps (transaction IDs only; no payment details)
- Cloudflare or equivalent CDN — performance and security
Some of these providers may process data outside your country of residence (including the United States). Where required, we rely on Standard Contractual Clauses (SCCs) or equivalent mechanisms to legitimize those transfers.
7. Data Retention
We retain personal data only for as long as needed for the purposes described in this policy, then delete or anonymize it:
- Newsletter subscriptions: until you unsubscribe
- Comments: until you request removal or 24 months of inactivity, whichever comes first
- Contact form messages: 24 months after last contact
- Analytics data: 14 months (Google Analytics default)
- App purchase records: 7 years (tax/audit obligations)
Server logs and security logs are retained for up to 90 days unless required to investigate an incident.
8. Your Rights
Depending on where you live, you have some or all of the following rights over the personal data we hold about you:
- Access — request a copy of the data we hold on you
- Rectification — correct inaccurate or incomplete data
- Erasure — ask us to delete your data (right to be forgotten)
- Restriction — limit how we process your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest or for direct marketing
- Withdraw consent — at any time, without affecting prior lawful processing
- Lodge a complaint — with your local data protection authority
To exercise any of these rights, email support@flutterdragon.com with the subject line “Data Request.” We respond within 30 days. We may need to verify your identity before acting on requests to protect against fraud.
If you are in the EEA, the UK, or Switzerland and believe we have not handled your request properly, you have the right to lodge a complaint with your national supervisory authority. In Morocco, the supervisory authority is the Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP).
9. International Data Transfers
Flutter Dragon is operated from Morocco. Some of the third-party providers we use (Google, Impact.com, our hosting/CDN) are located in the United States or the European Union. This means some personal data is transferred outside your country of residence. For EEA/UK visitors, these providers rely on the European Commission’s Standard Contractual Clauses (SCCs) and equivalent UK/Swiss safeguards to legitimize the transfer.
10. Data Security
We take reasonable and appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These include:
- HTTPS/TLS encryption for all data in transit
- Strong passwords, two-factor authentication on admin accounts
- Regular WordPress and plugin security updates
- Restricted access to personal data (only the site operator)
- Daily / weekly backups stored encrypted off-site
- Rate limiting and a web application firewall (where used)
Despite our efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.
11. Payments and In-App Purchases
In-App Purchases & Payment Data. Our mobile apps offer In-App Purchases (IAP). When you make a purchase, the transaction is processed directly by the Apple App Store or Google Play Store. We do not collect, store, or have access to your credit card numbers or bank account details.
We only receive a unique Transaction ID and Purchase Receipt provided by the app stores. This data is used solely to:
- Verify the validity of your purchase
- Grant access to premium features or virtual content
- Restore your purchases if you reinstall the app or change devices
Subscriptions auto-renew unless canceled at least 24 hours before the end of the current billing period, as described in our Terms of Use.
Flutter Dragon does not issue refunds directly. All refund requests must be submitted through the Apple App Store or Google Play Store support systems.
12. Children’s Privacy
Flutter Dragon is not directed at children under the age of 13 (or under 16 in the EEA/UK, as required by GDPR). We do not knowingly collect personal information from children. The site’s content (Flutter development resources) is targeted at adult developers and professionals.
The mobile apps published under the Flutter Dragon name (TOEFL Exam Practice and FRM Exam Practice) are also intended for adult learners and explicitly state a 4+ or 17+ age rating on the stores. If you believe we have inadvertently collected information from a minor, please contact us at support@flutterdragon.com and we will delete the data promptly.
13. Do Not Track and Global Privacy Control
Some browsers offer a “Do Not Track” (DNT) signal or “Global Privacy Control” (GPC) header. Where required by law, we treat such signals as a valid opt-out of cookies for targeted advertising purposes. At this time, no industry-wide standard for DNT has been adopted, but we honour the signal where applicable.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, our service providers, or applicable law. When we make material changes we will:
- Update the “Last Updated” date at the top of this page
- Where the change affects your rights, post a visible notice on the site or email subscribers where possible
The current version of this policy always supersedes all previous versions. Archived versions are available on request.
15. Contact Us
If you have any questions or concerns about this Privacy Policy, our practices, or wish to exercise your data rights, please contact us:
Email: support@flutterdragon.com
Phone: +212 657 347 949
Operator (Data Controller): Zakaria Ferzazi
Location: Morocco
Website: https://flutterdragon.com
We aim to acknowledge all privacy requests within 7 days and resolve them within 30 days.
For general terms about using the site, see our Terms of Use. For details on affiliate commissions, see our Affiliate Disclosure.