Back to home

Privacy Policy

Effective date: May 31, 2026

1. Introduction

R6 Stratbook ("we," "us," or "our") operates the R6 Stratbook website and web application (the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you use the Service. By creating an account or using the Service, you agree to the practices described in this policy.

If you have questions or concerns about this policy, contact us at legal@r6stratbook.com.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

  • Email address
  • Display name (chosen by you)
  • Gaming platform preference (PC, Xbox, or PlayStation)
  • Password (stored as a hashed value — we never store your plaintext password)

2.2 User-Generated Content

We store the content you create using the Service, including strategy names, descriptions, canvas drawings, operator assignments, and notes ("Content"). Content you mark as public is visible to all visitors of the Service, including anonymous users.

2.3 Usage Data

We may collect technical information about how you use the Service, including pages visited, features used, actions taken (such as strategies created or forked), timestamps, and error reports. This data is used to operate, maintain, and improve the Service.

2.4 Device and Browser Information

Our hosting provider (Vercel) and error monitoring service (Sentry) may automatically collect standard server log data, including your IP address, browser type and version, operating system, and referring URLs. This data is used for security, debugging, and service reliability purposes.

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your account and authenticate your identity
  • Provide, operate, and maintain the Service
  • Serve and display the Content you create, including public Content to other users
  • Send transactional emails (account confirmations, password resets)
  • Monitor and improve Service performance, reliability, and security
  • Detect and prevent fraud, abuse, or violations of our Terms of Service
  • Respond to your support requests and communications
  • Comply with legal obligations

We do not sell your personal information. We do not use your personal information for advertising or share it with advertising networks.

4. Third-Party Service Providers

We share personal information only with service providers that process data on our behalf to operate the Service. These providers are contractually obligated to protect your data and may not use it for their own purposes.

4.1 Supabase

Supabase, Inc. hosts our database, authentication system, file storage, and real-time messaging infrastructure. Your account data, Content, and session information are stored on Supabase's servers. Supabase is SOC 2 Type 2 compliant and provides a Data Processing Addendum (DPA) for GDPR compliance. See Supabase's privacy policy at supabase.com/privacy.

4.2 Vercel

Vercel, Inc. hosts and serves the R6 Stratbook web application. Vercel processes standard request log data including IP addresses. See Vercel's privacy policy at vercel.com/legal/privacy-policy.

4.3 Resend (Transactional Email)

Resend processes transactional emails on our behalf (account confirmation, password reset). Your email address is shared with Resend for the sole purpose of delivering these messages.

4.4 Sentry (Error Monitoring)

Sentry, Inc. provides error monitoring and crash reporting. If the application encounters an error, diagnostic information (which may include your user ID and the action you were performing) may be sent to Sentry to help us diagnose and fix the issue.

5. Cookies and Local Storage

The Service uses browser cookies and local storage to maintain your authentication session and remember your preferences. Specifically:

  • Session cookies: Set by Supabase Auth to keep you logged in across page navigations. These are essential to the operation of the Service.
  • Local storage: Used to cache application state such as your current editor preferences. No personal information is stored in local storage.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You may disable cookies in your browser settings, but doing so will prevent you from logging in to your account.

6. Data Retention

We retain your account information and Content for as long as your account is active. If you delete your account, we will delete your personal information and Content from our active systems within 30 days. Some information may persist in encrypted backups for up to 90 additional days before being overwritten. We may retain certain data longer if required by law or to resolve disputes.

To delete your account, visit your account settings page or email legal@r6stratbook.com with the subject line "Account Deletion Request." We will process your request within 30 days.

7. Children Under 13 (COPPA)

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. During account registration, we ask for your date of birth to verify eligibility. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe a child under 13 has created an account, please contact us at legal@r6stratbook.com.

8. Rights for EU/EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You may request that we correct inaccurate or incomplete personal data.
  • Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data, subject to legal retention obligations.
  • Right to Data Portability: You may request your personal data in a structured, machine-readable format.
  • Right to Restriction of Processing: You may request that we restrict how we process your data in certain circumstances.
  • Right to Object: You may object to processing of your personal data in certain circumstances.

Our legal basis for processing your data is the performance of the contract between you and R6 Stratbook (account creation and Service delivery) and our legitimate interest in operating and improving the Service. To exercise any of these rights, email us at legal@r6stratbook.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection supervisory authority.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted database storage (managed by Supabase), HTTPS for all data in transit, and server-side authentication checks on all data access endpoints. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" at the top of this page. If we make material changes, we will notify you by email at the address associated with your account. Your continued use of the Service after the effective date of any update constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

  • Email: legal@r6stratbook.com
  • Product: R6 Stratbook

Effective date: May 31, 2026