QuickFrag

Privacy Policy

Last updated: 28 March 2026

1. Who we are

QuickFrag provides Counter-Strike 2 matchmaking, game server orchestration, and related community features (this website and connected services). This notice explains how we process personal data when you use quickfrag.fr and associated services.

Contact (data protection): support@quickfrag.fr

2. What data we collect and why

We only process data that is necessary to run the service, secure accounts, and improve the product.

Account and authentication

  • Email address and password hash when you register (handled by our authentication provider).
  • OAuth profile data (e.g. identifier, email where provided) when you sign in with third-party providers such as Google, Discord, or Apple.
  • Steam identifier and public Steam profile information (e.g. persona name, avatar) when you link your Steam account, as required to play and display your profile.

Game and product data

  • Matchmaking and match data (e.g. match id, map, status, scores, timestamps).
  • Player profile data stored in our database (e.g. display name, rank/ELO-style metrics, avatar URL).
  • Social features you use (e.g. friends, groups, invitations, chat messages) and related metadata.

Technical and security data

  • Server logs, security events, and audit logs where we need to investigate abuse or outages.
  • Cookies and similar technologies as described in our Cookie policy.

Communications

  • Emails sent for account security, service messages, or (where you have agreed) marketing — transactional emails may use a provider such as Mailjet (EU API available; configuration is chosen to align with GDPR-friendly hosting where possible).

3. Legal bases (GDPR)

Depending on the processing, we rely on:

  • Performance of a contract — providing matchmaking, servers, and your account.
  • Legitimate interests — securing the platform, preventing fraud, and improving stability (balanced against your rights).
  • Consent — where required (e.g. non-essential cookies / analytics, certain marketing).
  • Legal obligation — where the law requires us to retain or disclose information.

4. Where data is processed

  • Database and authentication are provided by Supabase (PostgreSQL and Auth). Data may be stored in the region configured for our Supabase project.
  • The website may be hosted on Vercel or similar edge/CDN infrastructure.
  • Game servers run on cloud or dedicated infrastructure provisioned for matches.

We use subprocessors that act on our instructions. We do not sell your personal data.

5. How long we keep data

We retain data only as long as needed for the purposes above, unless a longer period is required by law. Examples:

  • Account data — for the life of the account, then deleted or anonymised according to our retention rules.
  • Match and gameplay statistics — typically retained for leaderboard/history features; may be aggregated over time.
  • Logs — kept for a limited period for security and debugging.

6. Sharing of data

We may share data with:

  • Infrastructure providers (e.g. Supabase, hosting, email) strictly to operate the service.
  • Valve / Steam only as required for Steam-linked features (under Valve’s terms).
  • Authorities when legally required.

We do not sell personal data.

7. International transfers

If data is transferred outside the European Economic Area, we rely on appropriate safeguards (e.g. Standard Contractual Clauses) where required by GDPR.

8. Your rights

Where GDPR applies, you may have the right to:

  • Access, rectify, and erase your data.
  • Restrict or object to certain processing.
  • Data portability for data you provided, where technically feasible.
  • Withdraw consent at any time (without affecting prior lawful processing).
  • Lodge a complaint with a supervisory authority (in France: CNIL).

To exercise your rights, contact support@quickfrag.fr. We may need to verify your identity.

9. Children

QuickFrag is not directed at children under the age where parental consent is required for your country. If you believe we have collected such data, contact us and we will delete it.

10. Changes

We may update this policy. The “last updated” date at the top of the page will change when we do. Continued use of the service after changes means you acknowledge the updated policy where permitted by law.

Cookie preferences