Privacy Policy

Last updated: 3 July 2026

1. Who we are

QuickFrag provides Counter-Strike 2 matchmaking, game server orchestration, and related features (progression, shop, Battle Pass, Clip Studio, etc.). This policy describes how we process personal data when you use quickfrag.fr and connected services.

Data controller: À COMPLÉTER — Prénom Nom — support@quickfrag.fr

2. Data we collect and why

Account and authentication

Email address and password hash on registration (via our auth provider).
OAuth profile data (ID, email where applicable) from Google, Discord, Apple, etc.
Steam ID and public Steam profile data when you link Steam.

Game and product data

Matchmaking and match data (match ID, map, status, scores, timestamps).
Player profile (display name, ELO, level, avatar, history).
Social features (friends, groups, invitations, messages).
Progression and virtual economy: credit balance, ledger history, cosmetic inventory, Battle Pass progress, shop purchases and case openings (timestamps and item IDs, no card data).

Payment

Paid subscriptions are processed by Stripe. QuickFrag receives limited billing data (Stripe customer ID, subscription status, amount) but does not store card numbers.

Technical, security, and analytics

Server logs, security events, audit logs.
Cookies and local storage — see our Cookie Policy.
First-party analytics (with consent): pseudonymous visitor/session IDs, page views, visit duration, referrer, UTM parameters, language, viewport; hashed IP on the server.

Communications

Emails for security, service, or (with consent) marketing — via providers such as Mailjet.

3. Legal bases (GDPR)

Contract performance — account, matchmaking, servers, credits, shop, subscription.
Legitimate interest — security, fraud prevention, stability, product improvement.
Consent — non-essential cookies/analytics, marketing.
Legal obligation — where required (e.g. billing records).

4. Processors and hosting

| Provider | Role | |----------|------| | Supabase | PostgreSQL database, authentication | | Vercel | Website / frontend hosting | | Railway | API and orchestration hosting | | Cloudflare | CDN, network protection | | Stripe | Payments and subscriptions | | Mailjet | Transactional email | | OVH Cloud / DigitalOcean | CS2 game servers |

Data may be processed in the EU and, for some providers, in the United States with appropriate safeguards (standard contractual clauses) where GDPR requires.

We do not sell your personal data.

5. Retention

Account — for account lifetime; deletion or anonymization within 30 days after validated request, unless legally required to retain.
Matches and stats — for history and leaderboards; may be aggregated.
Credit ledger — limited retention after account closure for accounting and disputes.
Technical logs — limited (typically 12 months).
Cookie consent — 12 months.

6. Recipients

Processors listed above.
Valve / Steam as required for Steam features.
Authorities when required by law.

7. Transfers outside the EU

See section 4. Contact support@quickfrag.fr for information on safeguards.

8. Your rights

Where GDPR applies: access, rectification, erasure, restriction, objection, portability (where technically feasible), withdraw consent, complaint to your supervisory authority (in France: CNIL).

Contact: support@quickfrag.fr. We may verify your identity.

9. Minors

QuickFrag is for users aged 18 and over (Counter-Strike 2: PEGI 18). If you believe a minor provided data, contact us for deletion.

10. Changes

We may update this policy. The “last updated” date at the top will change.