Privacy

1. Controller and scope

CyberCredit is an independent public-information project run by its maintainers, not affiliated with any game platform or publisher. The maintainers are the controller for the personal data described here.

This page applies to the website, the public API, and the report, appeal and case-lookup features.

2. Data we process

Lookup records: game, public account ID and timestamp, used for the recent-lookups list and operational statistics. Kept for 30 days; they contain no visitor IP and cannot identify a visitor.

Re-query cooldowns: public account ID and timestamp, kept for 90 days to enforce the per-account re-query limit.

Reports and appeals: public account ID, category, description, public evidence links, an optional contact email, a salted IP hash (used only for rate limiting and abuse prevention), status, language and timestamps. These are not published and are accessed only by authorised moderators for review, correction, security and dispute handling.

Score history: public account data and score snapshots, retained permanently to review score changes; snapshots contain no visitor information.

Operational logs: produced by the Cloudflare Workers platform. Application logs are redacted and contain no API keys or full request URLs. Log retention is set by the platform and used only for troubleshooting and security analysis.

We require no account or login and do not collect your name, phone number, payment details or game credentials.

3. Purposes and legal bases

We process data on the basis of legitimate interests: providing the public-information service, keeping it secure, preventing abuse, handling reports and appeals, and improving the service.

Where you provide an optional contact email or make a voluntary submission, we rely on your consent or on the need to handle the request. You may withdraw consent at any time without affecting prior lawful processing.

We may process or disclose necessary information to comply with a legal obligation or a valid legal request.

We do not make decisions with legal or similarly significant effects about any person based solely on an automated score. The score is a summary of public records; third parties who use it for their own decisions are responsible for those decisions.

4. Public data only

We process only account information that game platforms already publish, such as persona name, avatar, ban status, public match records and public achievements.

We do not query, infer or store real names, addresses, contact details, payment information or other private data.

To correct a record that originates upstream, contact the relevant platform. Deleting our cache only causes the upstream data to be fetched again on the next lookup.

5. Cookies and tracking

The site uses no advertising or cross-site tracking cookies, carries no ad network, does not profile users, and does not sell or share query data for marketing.

Cloudflare Turnstile may use necessary cookies or local storage to perform human verification; Cloudflare processes that data under its own terms and privacy policy.

6. Sharing and international transfers

We use Cloudflare for hosting, caching, security and rate limiting, and public game interfaces for data. These providers may process data on their global infrastructure.

International transfers rely on the providers’ contractual safeguards. We do not sell your data or share it with advertisers or data brokers.

We may disclose necessary information only to comply with law, respond to valid legal process, protect the service or users, or handle a dispute.

7. Retention

Lookup records are kept for 30 days; re-query cooldowns for 90 days; score history is retained permanently.

Reports and appeals are retained while the case is handled and for a reasonable period afterwards for audit, dispute or legal obligations; the salted IP hash is used only for rate limiting and security.

Operational log retention is set by the Cloudflare platform. When data is no longer needed, we delete or anonymise it.

8. Security

We use transport encryption, content security policies, access controls, log redaction and least-privilege access to protect data.

No system is absolutely secure. If a security incident may affect your data, we will handle it and provide notice as required by applicable law.

9. Your rights

Where applicable law provides (including the EU/UK GDPR and the California CCPA/CPRA), you have the right to access, correct, delete, restrict or object to processing, receive a portable copy, or withdraw consent. You may also complain to your local data-protection authority.

We do not sell personal information or share it for cross-context behavioural advertising. You may ask what categories of data we process, their sources and purposes, and you will not be discriminated against for exercising your rights.

To exercise a right, email cybercreditc@outlook.com with the specific account or request. We may need to verify the request; information we are legally required to retain may not be deleted immediately.

10. Children

The Service is not directed to children under 16, or the lower age required in your jurisdiction. If you are below that age, use the Service only with the consent and supervision of a parent or guardian.

We do not knowingly collect personal information from children. If you believe a child has submitted information, contact us to request deletion.

11. Third-party links

Pages may link to external sites such as Steam, which have their own privacy policies that this page does not cover.

Avatar images are loaded directly from the relevant platform’s CDN; we do not proxy or store them.

12. Changes

We may update this page to reflect changes to the Service, the law or our data practices. Material changes will be announced on the site and the “last updated” date will change.

13. Contact

For privacy questions, contact cybercreditc@outlook.com.