Privacy Policy

1. Introduction

At Esportmatches ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our competitive gaming matchmaking platform (the "Service"). Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, password, and profile information
• Steam Account Data: Steam ID, username, profile information, and game statistics
• Payment Information: Billing information processed through Stripe (we do not store credit card details)
• Communication Data: Messages, support tickets, and other communications with us
• User Content: Team names, match invitations, and other content you create on our platform

2.2 Information Automatically Collected

• Device Information: IP address, browser type, operating system, and device identifiers
• Usage Data: Pages viewed, features used, time spent on platform, and interaction patterns
• Match Data: Game results, statistics, performance metrics, and demo files
• Cookies and Tracking: Session information, preferences, and analytics data
• Server Logs: Technical information about your interactions with our Service

2.3 Information from Third Parties

• Steam: Public profile information, friends list, game ownership, and VAC ban status
• OAuth Providers: Profile information from Google, GitHub, or other authentication services
• Payment Processors: Transaction confirmation and payment status from Stripe

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, operate, and maintain our matchmaking platform
• Account Management: To create and manage your account and authenticate your identity
• Matchmaking: To match you with other players based on skill level and preferences
• Payment Processing: To process transactions and manage subscriptions
• Communication: To send you updates, notifications, and respond to inquiries
• Fair Play Enforcement: To detect and prevent cheating, fraud, and abuse
• Statistics and Leaderboards: To track and display player performance
• Platform Improvement: To analyze usage patterns and improve our Service
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service
• Security: To protect against unauthorized access and security threats

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on:

• Contract Performance: Processing necessary to provide the Service you requested
• Legitimate Interests: Our legitimate business interests in operating and improving the platform
• Consent: Your explicit consent for specific processing activities
• Legal Obligations: Compliance with applicable laws and regulations

5. How We Share Your Information

We may share your information in the following circumstances:

5.1 With Other Users

Your username, profile information, match history, and statistics are visible to other users on our platform. You can control some visibility settings in your account preferences.

5.2 With Service Providers

• Supabase: Authentication and database services
• Stripe: Payment processing
• Game Server Providers: Match hosting and server management
• Analytics Services: Usage analytics and platform monitoring
• Email Services: Transactional and marketing communications

5.3 For Legal Reasons

We may disclose your information when required by law, to protect our rights, prevent fraud, or respond to legal requests from authorities.

5.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specific retention periods include:

• Account Data: Retained while your account is active and for a reasonable period afterward
• Match Data: Retained indefinitely for historical records and statistics
• Transaction Records: Retained as required by law (typically 7 years)
• Support Communications: Retained for 3 years after resolution
• Server Logs: Retained for 90 days for security purposes

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal requirements)
• Portability: Request your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Restrict: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent for processing based on consent
• Opt-Out: Opt out of marketing communications at any time

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Keep you logged in and remember your preferences
• Analyze usage patterns and improve our Service
• Provide personalized content and features
• Detect and prevent fraud

You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of our Service.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure server infrastructure, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Service is intended for users aged 13 and above. We do not knowingly collect personal data from children under 13 without parental consent. If you are a parent or guardian and believe your child has provided us with personal data, please contact us, and we will delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Third-Party Links

Our Service may contain links to third-party websites and services, including Steam, social media platforms, and payment processors. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with your information.

13. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights regarding your personal information:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at [email protected] or call our toll-free number (if applicable).

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Data Protection Officer: For GDPR-related inquiries, you can contact our Data Protection Officer at [email protected]

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in accordance with applicable law.