Privacy

Data controller

The association EXKCODPLAYER (non-profit association declared under the French law of 1 July 1901 (legal category 9220), RNA W852014198, SIRET 102 622 693 00012), whose registered office is at 10 rue des Landes, 85170 Dompierre-sur-Yon, France, is the controller of the processing described here. Contact: exkcodplayer@outlook.com.

No data protection officer has been appointed.

In short

• No advertising, no audience measurement tool, no sale of data.
• RankedDB is a public leaderboard: your profile, SR, history and screenshots are visible to everyone.
• The Windows app reads a region of the game window on your PC; only the result of the reading is sent, plus, unless you turned it off, a sample of small crops kept for 30 days.
• Your OBS password never leaves your device.
• To fight cheating, the Discord ID of registered accounts is shared with ExKcodplayer. You can object.

What we process, why, and for how long

What is public

Visible to everyone, without an account, on the website, in the public API and in shared previews:

• your profile: player name with its tag (#…), platform, region, country, bio, socials, setup, badges, teams;
• your Discord avatar, whose address contains your Discord ID; or, in its place, a tournament photo provided by ExKcodplayer when your player name matches;
• your SR, tier, history, screenshots and season archives;
• the link between your main profile and your secondary accounts, both ways;
• the Pro badge;
• your hosted overlay and, while it is open in OBS, your presence on the Live page;
• your Twitch status and streams, if you linked Twitch;
• your teammate-finder availabilities (Discord name, rank, comment, code); your Discord ID is replaced there by a hash.

Never public: your Discord name (outside the teammate finder), your date of birth, your IP address, your payment data, your reading evidence, your diagnostic reports and anti-cheat data.

The Windows app

• Local reading: the app analyses a bounded region of the game window on your PC. It never captures the whole screen, does not read the keyboard, microphone or clipboard, and contains no telemetry tool.
• What it sends: the result of each reading (SR, date, game, confidence, account name read on screen); the Top 250 read in game (names, SR and positions of other players, erased 6 hours after the last reading); your overlay settings.
• Reading evidence: a sample of decisions (rejections, large discrepancies, one reading in ten), with three small crops of the rank card. Enabled by default, can be turned off in Settings; kept for 30 days on our server, in a non-public area. A copy of the last 50 decisions stays on your PC.
• Device fingerprint: the motherboard ID, the disk serial number and the processor ID are combined then hashed on your PC; only the result is sent. It is used to limit the app to one PC per account and to enforce device bans, which survive account deletion.
• On your PC: your sign-in tokens and your OBS password are encrypted by Windows (DPAPI); a local history, your settings and a technical log without player names or SR stay in your user folder.
• Updates: the app queries an update server (upsetbyexk.com), hosted on the same server as RankedDB, which receives your IP address and the installed version.
• Test edition (testers only): every three matches, it automatically sends a diagnostic archive including reading evidence and the account name to that same server.

The mobile app

It signs in through Discord; its token is kept in the phone's secure storage. It uses Firebase only for notifications (no analytics, no crash reporting). On iPhone, it may ask for access to the camera and your photos to send a rank screenshot, and its widget keeps your player name and latest SR on the phone. It does not ask for your location.

The “RankedDB SR” Twitch extension

The “RankedDB SR” extension is an overlay that a streamer can install on their own Twitch channel. It displays, on that channel only, the streamer's public SR and rank — and only if they linked their Twitch account on RankedDB by signing in to Twitch, which proves the channel is theirs. It shows nothing that is not already public on their profile. To fetch it, the extension sends rankeddb.com only the channel's public Twitch ID. RankedDB receives no personal data about viewers through the extension: no Twitch ID, no name, no cookie; only the technical data of any web request (IP address, browser), used for rate limiting and kept as stated in the “Security and logs” row above. The streamer can turn the overlay off and choose which game it shows (Warzone or multiplayer) from their Streamer Hub, on the website or in the mobile app. The extension runs inside Twitch, whose own privacy policy applies to your use of Twitch.

Overlay and OBS password

Your OBS password is never sent to RankedDB. On the website (Overlay Studio), it is kept in your browser's local storage, in plain text, so the page can connect directly to your OBS; you can erase it by clearing the site's data. In the Windows app, it is read from OBS's configuration and encrypted by Windows. Only your overlay settings (theme, socials, durations) are synchronised with our server.

Sharing with ExKcodplayer

ExKcodplayer (exkcodplayer.com and its Discord bot), hosted on the same server as RankedDB, exchanges data with RankedDB in both directions:

Legal basis: our legitimate interest, and that of players, in a cheat-free leaderboard. A file is not an accusation: no sanction is taken automatically, an administrator examines each case, and a verdict of innocence clears the alert.

You can object to these exchanges by writing to exkcodplayer@outlook.com. We act on your objection unless there are compelling legitimate grounds, which we will tell you.

Players who are not registered (Top 250)

RankedDB also processes data about players who have no account with us (article 14 GDPR):

• the Top 250 collected every 30 minutes from the game's public leaderboard: player name, SR, rank and links to public channels;
• public profiles of Top 250 players, created by an administrator: name, in-game name, SR, ranks, history (500 points at most) and public channels;
• the Top 250 read in game by registered players' Windows app: player name, SR and position, erased 6 hours after the last reading;
• a tournament photo provided by ExKcodplayer, shown when the player name matches.

Purpose: inform about the competitive leaderboard. Legal basis: legitimate interest. Profiles stay published with no set period. If this concerns you, you can object or ask for rectification at exkcodplayer@outlook.com: unless there are compelling legitimate grounds, we remove the profile.

Recipients and processors

Your data is accessible to RankedDB's volunteer administrators, within the limits of their role, and to the following providers:

Members of the Discord servers where RankedDB is installed see the roles and announcements that concern you. We may also disclose data to authorities requesting it within a legal framework. We sell no data.

Transfers outside the European Union

Discord, Google, Stripe and Twitch may process your data in the United States. These transfers rely on the safeguards provided by the GDPR: the European Commission's adequacy decision (EU-US Data Privacy Framework) for companies that participate in it, or the standard contractual clauses adopted by the Commission. You can ask us for details.

Cookies and local storage

RankedDB uses no advertising cookie, no audience measurement cookie and no tracking tool. The cookies and storage below are strictly necessary for the service or remember a choice you made: they do not require consent (article 82 of the French Data Protection Act).

Your browser's local storage remembers: the game chosen, the language, your recent searches, your player name and cached statistics, your teams and pending invitations, the live feed, your notification preferences, the banners and announcements you closed, and your OBS password and port (see above). None of it is sent to RankedDB.

The “Cookies” banner is only there to inform you: its button remembers that you read it, and no tracker waits for your agreement to start.

Third-party content: the Live page embeds Twitch's player, which may set its own cookies under Twitch's policy. The Amazon links in players' setups are affiliate links: Amazon receives nothing from us, but applies its own cookies when you click.

Security

Exchanges with the website and apps are encrypted (HTTPS). Administration is restricted to authorised accounts, checked on every request. Reading evidence is stored outside the public area. On your PC, tokens and the OBS password are encrypted by Windows; the device fingerprint is hashed before being sent. No measure is infallible: in the event of a data breach that puts you at risk, we will notify the CNIL and, where the law requires, you.

Deleting your account

From your dashboard. Deletion is refused if you own a team or if your account is banned: in those cases, write to us.

• Erased: your account (Discord ID, name and avatar, date of birth), your sessions, your linked device, your diagnostic reports, your reading evidence (records and crops), your notification tokens, your friends and friend requests, your Twitch link. A running Pro subscription is cancelled immediately.
• Kept and public: your player profiles, detached from your account — name with its tag, SR, history, screenshots, season archives, bio, socials, setup, overlay settings, badges, teams — and the history of your Twitch streams.
• Kept and not public: screenshot analysis results, teammate-finder availabilities (up to 7 days after they expire), messages sent through the contact form (up to one year after they are handled), anti-cheat data, device bans, moderation logs, the Stripe customer, and your record in ExKcodplayer's registry.

To have your profiles and the rest erased too, write to exkcodplayer@outlook.com. We reply within one month.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and the right to withdraw your consent at any time. You may also set instructions for what happens to your data after your death.

To exercise them: exkcodplayer@outlook.com, the contact form, or by post to 10 rue des Landes, 85170 Dompierre-sur-Yon, France. State your player name or Discord account; we may ask you to prove the account is yours. We reply within one month, which may be extended by two months if the request is complex, in which case we let you know.

If you believe your rights are not respected, you can lodge a complaint with the CNIL (French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr, or with the authority of your EU country of residence.

Minors

RankedDB is intended for people aged 15 or over; between 13 and 15, a parent's consent is required. When a date of birth is entered, a date making the user under 13 is refused. The date is not mandatory and parental consent is not technically checked. A parent can exercise their child's rights by writing to us.

Changes to this policy

We update this policy when our processing changes. The date at the top of the page shows the latest version; a significant change is announced on the website. RankedDB does not know your email address unless you write to us: so we cannot notify you by email.