Privacy policy
This English version is provided for convenience only. In case of discrepancy, the French version prevails.
Last updated: [DATE DE MISE EN LIGNE]
This page explains in plain terms what data Strive uses, why, for how long, and how you stay in control of it. It applies the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Who is responsible for your data?
The data controller is Strive's publisher: [NOM DE L'ÉDITEUR] ([STATUT DE L'ÉDITEUR — ex. « particulier, à titre non professionnel »]). Contact for any question or to exercise your rights: strive4esport@gmail.com.
2. Minimum age
Strive is reserved for people aged 15 and over. We don't knowingly collect data about children under 15. If you are under 15, don't create an account. If a parent finds that their child under 15 has an account, they can write to us: we close the account and delete the data.
We don't ask for your date of birth or an ID document at sign-up: you simply declare that you are 15 or older.
3. What data, for what purpose, and on what legal basis?
The “legal basis” is the reason provided by the GDPR that allows us to use a piece of data.
| Data | Why | Legal basis |
|---|---|---|
| Account: username, email address, password (stored in irreversible encrypted form, never in plain text), chosen role (player, caster, coach), sign-up date, acceptance of the terms | Creating and managing your account, logging you in | Performance of the contract (the terms of use) |
| Game profile: Epic Games username, platform, rank, peak MMR, number of games, Xbox / PlayStation IDs (optional), Discord / Steam accounts if you link them (ID and display name) | Registering you for tournaments, balancing brackets, letting your opponents find you, fighting fake accounts | Performance of the contract; legitimate interest (fair tournaments) |
| Public profile (optional): picture, banner, bio | Personalising your profile | Performance of the contract |
| Optional private information: country, phone number | Statistics by country; contacting you if needed for a tournament | Your consent (you can erase them at any time in your settings) |
| Tournaments: registrations, team, check-in, scores, results, disputes, ranking, Prestige points, feedback left after a tournament | Running tournaments, publishing brackets, results and rankings | Performance of the contract |
| Social: friends, friend requests, private messages, match chat, permanent team, online status (last activity, “do not disturb”) | Making the community features work | Performance of the contract |
| Moderation: reports, warnings, suspensions and their reasons, staff action log | Enforcing the rules, protecting players, handling appeals | Legitimate interest (community safety); legal obligation (handling reports) |
| Security: login sessions (browser type, dates), verification codes, reset links, IP address used to limit login attempts and, for account creation and logins, kept in a log | Protecting accounts, preventing abuse, responding to requests from the authorities | Legitimate interest (security); legal obligation (identification of content authors, article 6 of the French law of 21 June 2004) |
| Notifications and emails: notification preferences, service emails (forgotten password, login code, email change) and the notifications you chose | Letting you know about what concerns you | Performance of the contract; your consent for announcements and news (disabled by default) |
| Idea box: your suggestions | Improving the site | Legitimate interest |
| Stats verification: 2v2 peak MMR and number of games looked up on your public Tracker Network profile (rocketleague.tracker.network) from your Epic Games username | Checking the stats you declare, balancing brackets, fighting cheating. The result is saved on your profile, you can see it and dispute it; every decision (“Verified” badge, correction, sanction) is made by a staff member | Legitimate interest (fair tournaments) |
Some data doesn't come from you: the staff looks up your public stats on Tracker Network (a publicly accessible source) to check the ones you declared. You can object to this check by writing to us; in that case, you may be limited to tournaments that aren't reserved for verified profiles.
We collect no sensitive data (health, opinions, religion…): don't put any in your bio or messages. We do no targeted advertising, no profiling and no resale of data, and no automated decision producing legal effects for you. Bracket seeding is calculated automatically from peak MMR; sanctions are always decided by a person.
Required fields are marked at sign-up (username, email, password); the Epic Games username is required to play in a tournament. Everything else is optional.
4. What others can see
- Public (site visitors): username, picture, banner, bio, role, rank, peak MMR, number of games, Epic Games username, Xbox / PlayStation IDs provided, team, tournament results, Prestige, sign-up date, online status. Profile pages are not offered for indexing by search engines.
- Your friends and opponents: your messages, the private match details during a match.
- The staff: the information needed for moderation and organisation. Your email address is only visible to admins; your country and phone number only to admins.
- Never public: email, password, country, phone number, private messages.
5. How long do we keep your data?
| Data | Duration |
|---|---|
| Account and profile | As long as your account exists. Inactive account: deleted after 2 years without login, with a warning email 30 days before. |
| Match chat | Deleted at the end of the match. If it was reported: kept until the report is closed. |
| Private messages | 12 months after sending, or until your account is deleted. |
| Notifications | The 100 most recent. |
| Login sessions | 12 hours, or a rolling 30 days with “Stay logged in”. |
| Security codes and links (two-factor authentication, forgotten password, email change) | From 10 minutes to 1 hour, then erased. |
| Log of account creations and logins (date, IP address) | 1 year. |
| Warnings, suspensions, reports and moderation log | 3 years after the decision (permanent ban: kept as long as it applies, to prevent re-registration). |
| Tournament results, brackets, rankings | Kept indefinitely for the sporting record; made anonymous (“Deleted player”) if you delete your account. |
| Rights requests and email exchanges | 3 years after the last reply. |
| Database backups | 30 days maximum. |
6. Who receives your data?
Your data is used by Strive's publisher and volunteer staff, who are bound by confidentiality. It is neither sold nor rented. We use technical service providers (“processors”):
| Provider | Role | Location |
|---|---|---|
| IONOS SE | Website hosting | Germany (European Union) |
| Neon, LLC (Databricks group) | Database hosting | Frankfurt, Germany (European Union); US company |
| Cloudflare, Inc. | Delivery and protection of the site (your IP address passes through this network) | Global network; US company |
| [PRESTATAIRE E-MAIL — actuellement Google (Gmail) ; prévu : Brevo, France] | Sending service emails | [European Union / United States depending on the provider] |
| Discord Inc. | Internal staff alert when an account is created (username only); linking your Discord account if you ask for it | United States |
| Valve Corporation (Steam) | Linking your Steam account, only if you ask for it | United States |
We may also pass data to the authorities (police, courts) when they request it within the framework provided by law.
Psyonix LLC and Epic Games receive no data from Strive: the information you provide to take part in tournaments is provided to the organiser (Strive) and not to Psyonix LLC.
7. Transfers outside the European Union
Some providers are US companies (Neon / Databricks, Cloudflare, Google, Discord, Valve). When data is transferred to the United States, these transfers are covered by the Data Privacy Framework (European Commission adequacy decision of 10 July 2023) for certified companies, or by the European Commission's standard contractual clauses. You can ask us for more information about these safeguards.
8. Your rights
At any time, you can:
- access your data and get a copy of it (“Download my data” button in Settings → Account);
- correct it (in your settings);
- erase it (“Delete my account” button in Settings → Account);
- withdraw your consent for optional data (country, phone number, announcement emails);
- object to processing based on our legitimate interest, or ask for it to be restricted;
- ask for the portability of your data (get it in a machine-readable format);
- give instructions about what happens to your data after your death.
To exercise a right other than through the site's buttons, write to strive4esport@gmail.com from your account's email address. We reply within one month. It's free.
If, after contacting us, you feel your rights are not respected, you can lodge a complaint with the CNIL (the French data protection authority): https://www.cnil.fr/fr/plaintes — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
9. Security
Passwords stored as an irreversible hash, encrypted connection (HTTPS), session cookies inaccessible to scripts, two-factor authentication by email available, limits on login attempts, data access restricted according to staff roles, backups. In case of a data breach presenting a risk to you, we notify the CNIL within 72 hours and inform you if the risk is high.
10. Cookies
Strive only uses essential technical cookies, with no advertising or analytics. Details on the Cookies page.
11. Changes
This policy may change. The date of the last update is shown at the top of the page; in case of a significant change, you are notified on the site or by email.