Privacy Policy

1 Privacy-by-Design Commitment

We believe your privacy is fundamental. MLBB Analytics operates on strict data minimization principles. We do not sell, rent, or trade your personal data to data brokers, ad networks, or commercial third parties.

2 What Data We Collect & Lawful Basis (GDPR Art. 6)

  • Account Credentials: Name, email address, and cryptographically hashed password upon registration. Lawful Basis: Performance of a Contract (Art. 6(1)(b)) to provide user accounts and sync custom builds.
  • User Content: Tactical gear builds, community briefs, comments, and post votes you author. Lawful Basis: Performance of a Contract (Art. 6(1)(b)).
  • Telemetry & Security Logs: Network connection details (IP address, user agent, and request path) captured purely for rate-limiting, brute-force mitigation, and error diagnosis. Lawful Basis: Legitimate Interests (Art. 6(1)(f)) to protect the platform against cyberattacks, spam bots, and abuse.

3 Cookies & Storage

Our platform uses exclusively strictly necessary first-party cookies for secure authentication (session) and Cross-Site Request Forgery protection (XSRF-TOKEN). We do not deploy third-party advertising cookies, invasive tracking pixels, or cross-domain behavioral monitors.

You can inspect or adjust cookie consent settings at any time using our built-in consent modal.

4 Data Storage & Retention Windows (GDPR Art. 5(1)(e))

In compliance with the principle of storage limitation, data is retained only as long as necessary for its specific purpose:

  • Account & Profile Data: Stored while your account remains active. Deleted permanently within minutes when you initiate account erasure.
  • Administrative Audit Logs: Retained for a maximum of 90 days, after which they are automatically and irrevocably purged by our automated maintenance scheduler.
  • API Tokens: Expired personal access tokens are pruned daily to prevent credential accumulation.

5 Your Statutory Rights Under GDPR

Right of Access & Portability (Art. 20)

Download an unencrypted, machine-readable JSON archive of all your account data directly from Profile Settings.

Right to Erasure / To Be Forgotten (Art. 17)

Permanently hard-delete your account anytime. All builds, comments, and security sessions are cascades wiped.

Right to Privacy & Restriction

Toggle "Private Account Mode" to shield your tactics and identity from public discovery directories.

Right to Rectification (Art. 16)

Correct or update personal details anytime directly within the Profile Management dashboard.

6 Privacy Office & Data Inquiries

For data protection inquiries, statutory rights requests, or questions regarding our privacy architecture, you may contact our privacy desk directly at:

Email: [email protected]

Finished Reading?

Return to hero analytics, build calculators, or draft simulations.

Privacy & Cookie Choices

We prioritize your privacy. We strictly use necessary cookies for authentication and CSRF security. You can reject non-essential tracking with a single click.