Privacy Policy

This Privacy Policy explains how rankmate collects, uses, and shares personal data when you use our website, marketplace, Discord integrations, and related services.

1. Who we are

The data controller will be the legal entity operating rankmate after incorporation (see the launch checklist). Until then, contact support@rankmate.gg for privacy requests.

2. Data we collect

• Account data. Email, display name, authentication provider ids (e.g. Discord, Google), age/ToS attestations, role, and profile fields you provide (region, languages, bio, preferences).
• Game API data. Linked game account identifiers, ranks, stats, match summaries, and verification signals retrieved from Riot, FACEIT, Steam/CS2 ingest, or similar providers you authorize.
• Marketplace data. Bookings, coin ledger entries, holds, withdrawals, reviews, reports, blocks, favorites, and trust statistics derived from booking history.
• Communications. Booking and lobby chat messages, and support emails.
• Technical data. Approximate online presence (last-seen timestamps), IP/device signals processed by our hosts, and error/performance telemetry (e.g. Sentry) when enabled.

3. LLM / AI processing

When you or an admin use AI features, we may send structured context to an LLM provider (for example OpenAI or Anthropic), including:

• Verified ranks, roles, and completed-session counts for seller bio drafts
• Recommendation reasons (not invented stats) for optional one-liners
• Dispute/report evidence bundles (state history, verification flags, recent chat excerpts, trust stats) for admin briefs

Prompts instruct models not to invent ranks or outcomes. AI output is advisory; humans remain responsible for listings and moderation decisions. Do not paste secrets into chat that you would not want processed for support or briefs.

4. How we use data

• Provide accounts, directory, lobbies, bookings, and wallets
• Verify ranks/matches and operate no-show / dispute flows
• Process payments and payouts via Stripe
• Enforce bans, blocks, rate limits, and soft-launch invites
• Improve safety, reliability, and product features
• Comply with law and respond to lawful requests

5. Sharing

We share data with processors that help run the service (hosting, database, auth email, Stripe, Discord APIs, game APIs, LLM providers, error monitoring, rate-limit Redis) under contractual safeguards. We do not sell personal data. Other users see profile and marketplace information you make available (e.g. display name, ranks, bio, reviews).

6. Retention

We retain account and ledger records for as long as needed to operate the marketplace, meet accounting/tax obligations, and resolve disputes. Chat and verification evidence for a booking may be kept for the dispute window and a reasonable period afterward for abuse prevention. You may request deletion of your account; we may retain limited records where required (e.g. fraud, chargebacks, legal holds).

7. GDPR / your rights

If you are in the EEA/UK, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability. You may also lodge a complaint with a supervisory authority. Contact us to exercise rights. Where processing is based on consent, you may withdraw it without affecting prior lawful processing.

8. Security

We use industry-standard hosting controls, access restrictions, and encrypted transport. No method of transmission or storage is perfectly secure.

9. Children

The service is for users 18+. We do not knowingly collect data from children under 18.

10. Changes

We may update this Policy; material changes will be posted on this page with an updated date. Continued use after changes means you accept the revised Policy where permitted by law.