Introduction & Scope
This policy explains what information FragTrack collects when you use our esports tracking tools, how we use it, and how you can manage or delete your data.
{{COMPANY_NAME}}("FragTrack," "we," "us," or "our") operates the FragTrack performance tracking platform. We are based in Pakistan and provide match logging, stats analysis, and roster tools for competitive gaming teams.
This Privacy Policy applies to all personal data and match records collected through our website, APIs, and account systems. We believe in clear, straightforward data practices without deceptive fine print.
Information We Collect
We collect the basic information needed to run your account (email, display name) and the match stats you log (kills, damage, placement, and scoreboard screenshots).
| Category | Data Elements | Purpose |
|---|---|---|
| Account Information | Display name / gamer tag, email address, salted password hash, optional avatar URL, Google profile ID (if using Google Sign-In). | Authentication, account identification, and security communications. |
| Team & Squad Data | Team name, roster memberships, team invite codes, and squad roles (IGL or Player). | Organizing squad records and managing role permissions. |
| Match Statistics | Map name, placement, kills, damage dealt, survival time, unnecessary casualties, team fight outcomes, and financial notes (if entered). | Generating dashboard analytics, KPI charts, and team performance matrices. |
| Media & OCR Files | End-of-match scoreboard screenshots uploaded for OCR extraction. | Extracting match numbers automatically to reduce manual data entry. |
| Technical & Log Data | IP address, browser user-agent, access timestamps, and error diagnostics. | Preventing automated attacks, rate limiting, and system troubleshooting. |
How We Collect Information
You provide most data directly when signing up, typing match results, or uploading screenshots. Our servers log technical connection details automatically for security.
We collect information through three direct channels:
- Direct User Input: Forms you fill out on registration, profile edits, manual match submission forms, and team creation screens.
- Scoreboard OCR Uploads: Screenshots you drag and drop into the dashboard for character recognition parsing.
- System Diagnostics & Auth Tokens: Cookies and server logs created automatically when your browser interacts with our API endpoints.
Why We Use Your Data
We use your data exclusively to deliver the platform features: computing your stats, keeping your account secure, and notifying you about important account events.
We process your data for the following specific purposes:
- Core Platform Functionality: Calculating kill points, positioning points, damage shares, and rolling match aggregates.
- Authentication & Security: Verifying email ownership via 6-digit OTP codes, managing session tokens, and enforcing lockout limits against brute-force attacks.
- Squad Collaboration: Allowing team members to view shared match logs and review teammate performance.
- Transactional Communications: Sending verification codes, password reset instructions, and security alerts.
Data Storage & Security
We protect your data with standard practical safeguards: encrypted HTTPS connections, salted bcrypt password hashing, and token rotation. We do not make exaggerated claims of certifications we do not hold.
We implement practical technical safeguards to protect your personal data from unauthorized access, loss, or misuse:
- Encryption in Transit: All web traffic and API requests are encrypted using Transport Layer Security (TLS/HTTPS).
- Password Protection: Passwords are never stored in plain text; they are hashed using salted bcrypt before database storage.
- Token Security: Session tokens use signed JSON Web Tokens (JWT) with restricted cookie flags (HttpOnly, SameSite, Secure in production).
- Database Isolation: Production databases are protected by firewall rules and restricted network access.
While we apply reasonable operational security, no Internet transmission is 100% immune to vulnerabilities. We encourage users to maintain unique passwords and keep squad invite codes confidential.
Data Sharing & Third Parties
We do not sell, rent, or trade your personal data to advertisers. We share data only with necessary infrastructure providers (cloud hosting, email delivery, Google login).
We work with trusted third-party service providers solely to operate the platform:
- Cloud Infrastructure & Database Hosting: Third-party cloud servers that securely host our application backend and PostgreSQL database.
- Email Delivery (Resend API): Used to deliver transactional emails, including verification codes and password reset links.
- Google Identity Services: Used optionally if you choose to sign up or log in using your Google account.
We will not disclose your personal data to law enforcement or government authorities unless required to comply with a valid legal order issued under the laws of Pakistan.
Cookies & Session Storage
We use strictly essential cookies for authentication and login sessions. We do not load advertising trackers or third-party behavioral analytics cookies.
FragTrack uses essential first-party cookies necessary for you to log in and navigate the dashboard securely:
- Session Authentication Cookies: Store temporary tokens so you stay logged in while navigating between dashboard tabs.
- Refresh Token Cookies: Secure, HttpOnly cookies used to refresh your session without asking you to log in repeatedly.
Because we do not run behavioral advertising or marketing tracking scripts, we do not deploy third-party advertising cookies on your browser.
Your Rights & Account Deletion
You can review your match data, update your display name, and request permanent deletion of your account and records at any time.
You have the following direct controls over your data:
- Access & Review: You can view all matches, damage logs, and stats linked to your gamer tag directly in your dashboard.
- Profile Correction: You can update your gamer tag, display name, and avatar directly from your profile settings.
- Account Deletion: You can request complete deletion of your account and associated personal data by emailing our support desk at {{CONTACT_EMAIL}}.
Data Retention Schedule
We keep your match data while your account is active. When you close your account, your personal details are removed from active databases, and backups purge within 30 days.
We retain account details and match logs for as long as your account remains active so you can track rolling multi-season statistics.
When you request account deletion, your user record, login tokens, and direct personal identifiers are permanently removed from our active database. Encrypted operational backups cycle out and purge within 30 days.
Children's Privacy
FragTrack is not intended for children under 13. If we discover an account created by an underage child without parental permission, we will delete it promptly.
FragTrack is designed for competitive gaming players and squads and is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.
If you believe a child under 13 has registered without parental consent, notify us at {{CONTACT_EMAIL}} and we will promptly delete the account.
Pakistani Law & PECA 2016
We operate in Pakistan and handle electronic data in compliance with Pakistani regulations, including the Prevention of Electronic Crimes Act 2016.
FragTrack is operated out of Pakistan. We handle electronic data and communications in accordance with applicable Pakistani laws, including the Prevention of Electronic Crimes Act (PECA) 2016 and relevant electronic transaction frameworks.
Pakistan does not currently possess an omnibus data protection statute identical to the European Union's GDPR. We state this transparently. We handle your gaming data responsibly, protect credential security, and maintain strict access controls in line with good industry practice.
Changes to This Policy
We will update the date at the top when modifying this policy and announce major updates inside the app.
We may update this Privacy Policy from time to time as we add new features or as legal standards develop. When updates occur, we will adjust the "Last updated" date at the top of this page.
For substantial changes that affect how we collect or process personal data, we will notify you through the dashboard interface or via your registered email address.
Contact Us
If you have questions about this privacy policy or want to request data deletion, contact us directly.
For any questions, concerns, or data requests regarding this Privacy Policy, please contact our team:
Company: {{COMPANY_NAME}}
Privacy Contact: {{CONTACT_EMAIL}}
Address: {{COMPANY_ADDRESS}}