Privacy Policy

Data controller

The data controller for ReadyCheck (rdycheck.gg) is ReadyCheck, reachable at [email protected]. For any request relating to your personal data (access, erasure, objection, cookie consent, etc.), write to that address. We do not currently appoint a separate Data Protection Officer (DPO); the same contact handles privacy requests.

Account & authentication data

When you create an account, we receive your email address and, if you sign in with Discord, Google, Twitch, or Battle.net, the basic profile information those providers share with us (typically your display name, avatar, and a unique account ID) — never your password on those platforms, which we never see. We store this to create your ReadyCheck account, keep you signed in, and display your username and avatar around the site. You choose your own in-app username and, optionally, a display name and bio in your profile settings.

Gameplay & virtual-economy data

Using ReadyCheck's fan features creates data tied to your account: your R-Coins wallet balance and transaction history, booster packs you've opened and the player cards you own, match predictions you've placed (including your pick, stake, and outcome), quest progress, and your Daily Spin streak. This data exists to run the features themselves — showing your balance, settling predictions, and tracking your collection — and is never sold or used for anything beyond operating ReadyCheck.

Legal bases for processing

Under the GDPR, we process personal data only where a legal basis applies:

• Contract performance — creating and managing your account, keeping you signed in, operating the virtual economy (R-Coins, boosters, predictions, quests), and providing the service you requested. • Legitimate interests — securing the platform (fraud/abuse prevention), keeping essential technical logs (e.g. hosting request logs), and improving reliability. You may object where applicable. • Consent — audience measurement / product analytics (Google Analytics, Microsoft Clarity, Google AdSense) and optional third-party stream/chat embeds (Twitch, Kick, YouTube) that may set their own cookies; you can accept or refuse via our cookie banner and change your choice later (see Cookies below). • Legal obligation — retaining certain records when the law requires it (for example, security-incident logs).

Payment and billing data for a supporter plan are processed to perform that subscription contract and to meet our accounting and tax obligations.

Uploaded images

A small number of trusted administrator accounts can upload replacement logos for teams, players, leagues, and organizations shown on the site. Uploaded files are stored with our cloud storage provider (Supabase Storage) and are only usable by that admin account; this feature isn't available to regular user accounts.

Infrastructure providers & third-party services

Infrastructure providers that process personal data on our behalf (processors), under appropriate contractual safeguards:

• Supabase — database, authentication, and file storage for your account, wallet, and gameplay data. • Hetzner — production VPS hosting (rdycheck.gg is not hosted on Vercel). Standard web request logs (IP, URL, timestamp) for security and performance. • Cloudflare — CDN, DNS and edge security (WAF / bot protection). May process your IP and request metadata to deliver and protect the site.

Esports / game data sources (not processors of your personal data — we do not send them your email, wallet, profile or account data, and they do not endorse ReadyCheck):

• PandaScore — licensed match, team and player data for titles they cover. • Liquipedia — community wiki (MediaWiki API) used for some games and tournaments not fully covered by PandaScore, including Apex Legends, Fortnite and World of Warcraft. • Leaguepedia (Fandom, lol.fandom.com) — community League of Legends wiki stats that may enrich LoL pages. • Raider.IO — World of Warcraft raiding, Mythic+, Arena and Race to World First. • ALGS Tools — Apex Legends Global Series lobby / standings feeds. • BLAST — Rocket League competition data used to fill gaps. • Krafton FOC API and PUBG Mobile esports APIs — PUBG: Battlegrounds and PUBG Mobile competition feeds. • Supercell Event Platform — Brawl Stars, Clash Royale and Clash of Clans official event schedules and results.

Independent platforms (controllers of their own processing when you interact with an embed):

• Twitch, Kick, and YouTube — if you accept cookies and watch an embedded stream or open its chat, your browser connects directly to that platform, which may set tracking/profiling cookies and process your IP under its own privacy policy. These embeds do not load until you accept our cookie banner.

Audience measurement & product analytics (loaded only after you accept cookies via our banner; not used for advertising or selling your data):

• Google Analytics — aggregated traffic and usage metrics (pages viewed, referrers, device/browser, approximate geography) to understand how ReadyCheck is used, improve SEO and navigation, and spot issues. • Microsoft Clarity — session insights and heatmaps to find UX bugs and friction (for example rage-clicks or dead ends) so we can fix the product experience.

These tools may set their own cookies and process technical identifiers under Google’s and Microsoft’s respective privacy policies. You can withdraw consent anytime via “Manage cookies” in the sidebar.

Stripe — payment processing for supporter plans (Pro, Pro+, Max). Stripe collects card details on its own pages. ReadyCheck never receives or stores your full card number. We receive only your plan, its status, the renewal date and a Stripe customer reference.

Cookies & local storage

Signing in uses an essential session cookie set by Supabase Auth, required for the site to work and not subject to consent.

Optional cookies / third-party embeds: Twitch, Kick, and YouTube embeds may drop their own cookies (including for tracking or personalization on those platforms). We only load those embeds after you accept via our cookie banner. Declining does not block ReadyCheck; stream/chat areas show a placeholder instead.

Changing or withdrawing consent: use the “Manage cookies” link in the sidebar (or site footer area), or clear this site’s cookies/local storage in your browser. You can accept or decline again at any time — withdrawing consent is as easy as giving it.

We also store a few small pieces of state in your browser’s local storage — never on a server — so guests can use gameplay features without an account (guest R-Coins balance, favorites, one-time free claims, and your consent choice). Local data stays on your device and disappears if you clear site data. Privacy questions: [email protected].

If you accept cookies, Google Analytics and Microsoft Clarity may also set cookies / collect technical usage data solely to measure audience, find bugs, and improve SEO and the product — never for targeted advertising on our side.

Data retention

We keep account and gameplay data for as long as your account is active. After a deletion request sent to [email protected], we delete or irreversibly anonymize your personal data within 30 days, except where we are legally required to keep records for longer (for example, security-incident logs).

Invoices and the record of paid plans are kept for the period required by French accounting and tax law, generally ten years, including after account deletion. That retention covers the billing record, not your gameplay data.

Your rights

If you're in the European Economic Area, the UK, or another jurisdiction with similar protections, you have the right to: access the personal data we hold about you; correct inaccurate data; request erasure of your data; export your data in a portable format; object to or restrict certain processing; and withdraw consent (for example, your cookie consent) at any time. To exercise any of these rights, email [email protected] — we'll respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority (in France: CNIL — https://www.cnil.fr).

Account deletion

To delete your ReadyCheck account and the personal data linked to it, email [email protected] from the address associated with your account (or include your username). We will process the request and delete or irreversibly anonymize your personal data within 30 days, except where we are legally required to retain certain records longer. There is currently no in-app self-serve account deletion button — email is the supported path.

Age requirement

ReadyCheck is not a gambling service and does not offer real-money wagering or cash-out. Creating an account requires that you are at least 18, or the minimum age to consent to online services in your country, whichever is higher. Supporter plans are optional paid subscriptions and are reserved for people aged 18 or over. R-Coins, booster packs and predictions cannot be bought on their own. See our Terms of Service. ReadyCheck is not directed at children under 13, and we do not knowingly collect their personal data. If a child under 13 has created an account, email [email protected] and we will delete it.

Security

Your data is stored in Supabase's managed Postgres database, protected by Row Level Security policies that restrict every table to only the rows you're allowed to see, and encrypted in transit via HTTPS/TLS. Wallet balances can only change through a single audited server-side function — never a direct client write — so gameplay data can't be tampered with from the browser.

International transfers

Our infrastructure providers (Supabase, Hetzner, Cloudflare) may process data in the European Union and/or the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the EU–US Data Privacy Framework (where the provider is certified) and/or Standard Contractual Clauses (SCCs), so your data continues to receive an adequate level of protection. Ask us at [email protected] if you want more detail about a specific provider.

Stripe may process payment data in the European Union and the United States under its own contractual safeguards.

Changes to this policy

We may update this Privacy Policy as ReadyCheck's features evolve. We'll update the "Last updated" date above when we do; material changes will be highlighted on the site.

Contact us

Questions about this policy or your data? Contact us at [email protected].