Privacy Policy

PWNZ.GG (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and other applicable laws.

We collect the following categories of personal data:

• Account data: name, email address, password (hashed)
• Order data: purchased services, quantities, in-game account IDs you provide, order notes
• Payment data: billing address, payment method type, last 4 digits of card. Full card details are processed by Stripe and never stored on our servers.
• Usage data: IP address, browser type, pages visited, referral source — collected via server logs and analytics
• Communications: messages sent to our support team

We process your personal data for the following purposes:

• To create and manage your account
• To process and fulfil your orders
• To send transactional emails (order confirmations, status updates)
• To provide customer support
• To detect and prevent fraud and abuse
• To comply with legal obligations
• To improve the Platform through aggregated, anonymised analytics

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

We process your data under the following legal bases:

• Contract: processing necessary to fulfil your order
• Legitimate interest: fraud prevention, platform security, analytics
• Legal obligation: tax records, regulatory compliance
• Consent: marketing communications (where applicable — you may opt out at any time)

We share data with the following trusted third parties only to the extent necessary:

• Stripe: payment processing. Stripe is PCI-DSS compliant. See stripe.com/privacy.
• Vercel: hosting and edge infrastructure
• Neon (PostgreSQL): database hosting
• Email provider: transactional email delivery

All processors are contractually bound to protect your data and may not use it for their own purposes.

We retain your account data for as long as your account is active. Order records are retained for 7 years to comply with tax and accounting obligations. You may request deletion of your account at any time; we will delete personal data that is not required to be retained by law within 30 days.

Under GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”), subject to legal retention requirements
• Restrict or object to certain processing activities
• Portability — receive your data in a structured, machine-readable format
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at privacy@pwnz.gg. We will respond within 30 days.

We use strictly necessary cookies to maintain your session and authentication state. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect Platform functionality.

We implement industry-standard security measures including TLS encryption in transit, bcrypt password hashing, and access controls on all data stores. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

The Platform is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe we have collected data from a child, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The updated date at the top of this page will reflect any changes. We will notify registered users of material changes by email.

For privacy-related enquiries, contact our data controller at privacy@pwnz.gg.