1. Who We Are
HubMatch ("we", "us", "our") operates the competitive gaming platform at hubmatch.pro. This Privacy Policy explains how we handle your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
2. Data We Collect
Account Data (provided by you)
| Data |
Source |
Purpose |
| Username |
Registration |
Profile identity |
| Email address |
Keycloak (OAuth) |
Account recovery, notifications |
| Nationality / Country |
Profile setup |
Regional matchmaking, national teams |
| Preferred position |
Profile setup |
Team matching (LFT/LFP) |
| Gaming platform (Steam/PS/Xbox/Epic) |
Profile setup |
Cross-play coordination |
| Platform username |
Profile setup |
In-game identification |
Linked Accounts (with your consent)
| Service |
Data Received |
Purpose |
| Discord |
Discord ID, username |
Bot integration, voice channels, notification DMs |
| Steam |
Steam ID |
Player verification, Steam player count |
Platform-Generated Data
| Data |
Description |
| ELO ratings |
tenMansElo, compElo — calculated from match results |
| Match statistics |
Goals, assists, saves, MVPs per match |
| Match results |
Scores, screenshots, verification status |
| Team membership history |
Join/leave/transfer records |
| Tournament/League participation |
Registration, results, standings |
| Achievements |
Badges and trophies earned |
| Reputation scores |
+rep endorsements from other players |
Technical Data (collected automatically)
| Data |
Purpose |
| IP address |
Security, abuse prevention |
| Browser type and version |
Compatibility |
| Timezone |
Display times in local timezone |
| Session data |
Authentication (Keycloak session cookie) |
3. How We Use Your Data
| Purpose |
Legal Basis (GDPR) |
| Account creation and authentication |
Contract performance (Art. 6(1)(b)) |
| Matchmaking, team management, tournaments |
Contract performance (Art. 6(1)(b)) |
| ELO calculation and leaderboards |
Legitimate interest (Art. 6(1)(f)) |
| In-app notifications |
Legitimate interest (Art. 6(1)(f)) |
| Discord bot notifications |
Consent (Art. 6(1)(a)) — via Discord account linking |
| Displaying advertisements (Google AdSense) |
Consent for EEA/UK/CH (Art. 6(1)(a)); Legitimate interest elsewhere |
| Platform security and abuse prevention |
Legitimate interest (Art. 6(1)(f)) |
4. Cookies
Cookies We Use
| Cookie |
Type |
Purpose |
Duration |
| Keycloak session |
Strictly necessary |
Authentication — keeps you logged in |
Session (expires on logout/browser close) |
__gfc (Google CMP) |
Consent |
Stores your GDPR ad consent choice |
~13 months |
| Google AdSense cookies |
Advertising |
Ad serving and frequency capping |
Varies (set by Google) |
Cookie Consent
- Keycloak session cookie: Strictly necessary — no consent required.
- Google advertising cookies: For users in the EEA, UK, and Switzerland, a consent banner (Google CMP) is shown on first visit with 3 options: Agree / Disagree / Manage options.
- If you agree: personalized ads are served.
- If you disagree: only non-personalized ads are served. No tracking cookies from Google.
- Your choice is stored in the
__gfc cookie for ~13 months.
- Users outside EEA/UK/CH do not see the consent banner.
5. Third-Party Services
| Service |
Purpose |
Data Shared |
Privacy Policy |
| Keycloak |
Authentication |
Credentials (never stored locally) |
Self-hosted, no external transfer |
| Google AdSense |
Advertisement display |
IP, browser info (via cookies if consented) |
Google Privacy Policy |
| Discord (OAuth + Bot) |
Account linking, voice channels, DM notifications |
Discord ID, username |
Discord Privacy Policy |
| Steam API |
Player count display, account linking |
Steam ID |
Steam Privacy Policy |
| Cloudflare |
CDN, DDoS protection |
IP address, request headers |
Cloudflare Privacy Policy |
| Cloudflare R2 |
File storage (avatars, screenshots) |
Uploaded files |
Self-managed (R2: Cloudflare policy) |
We do not sell your data to any third party.
6. Data Retention
| Data |
Retention Period |
| Active account data |
As long as your account exists |
| Match results and statistics |
Indefinitely (part of competitive record) |
| Uploaded screenshots |
90 days after match verification completes |
| ELO history |
Indefinitely (part of competitive record) |
| Team transfer history |
Indefinitely (part of competitive record) |
| Deleted account data |
Anonymized within 30 days of deletion request |
7. Your Rights (GDPR)
As a user in the EEA, UK, or Switzerland, you have the right to:
| Right |
Description |
| Access |
Request a copy of all data we hold about you |
| Rectification |
Correct inaccurate personal data |
| Erasure |
Request deletion of your account and personal data |
| Restriction |
Restrict processing of your data |
| Portability |
Receive your data in a machine-readable format |
| Objection |
Object to processing based on legitimate interest |
| Withdraw consent |
Withdraw ad consent at any time (via Google CMP banner or browser cookie settings) |
To exercise these rights, contact us via Discord (see Section 9).
Response time: Within 30 days of receiving your request.
8. Data Deletion
When you request account deletion:
- Your Player profile is soft-deleted (marked as deleted, removed from public view)
- Your username and personal info are anonymized (replaced with "Deleted User")
- Your match statistics are retained in anonymized form (for competitive integrity — other players' records depend on match history)
- Your uploaded files (avatar, screenshots) are permanently deleted
- Your Keycloak account is deactivated
- Your Discord link is removed
- Process completes within 30 days
9. Contact
For data requests, privacy questions, or to exercise your GDPR rights:
- Primary: Discord support channel
- Email: [email protected] (for formal GDPR requests only)
10. Children
The Platform is not intended for users under 16 years of age. We do not knowingly collect data from children under 16. If we discover such data, it will be deleted promptly.
11. Changes to This Policy
- We may update this Privacy Policy at any time.
- Significant changes will be announced via in-app notification.
- The "Last updated" date at the top reflects the most recent revision.
- Continued use of the Platform after changes constitutes acceptance.