Privacy Policy

Last updated: 11 July 2026

Draft — not yet legally reviewed. This is a working template. Replace the [highlighted placeholders] and have the final text reviewed via a policy generator or solicitor before launch.

This Privacy Policy explains how BravePanic, operated by [Company Legal Name, registered at 30 Churchill Place, London, E14 5RE] ("we", "us"), collects and uses your personal data. We are the data controller. This is a draft — complete the placeholders and have it reviewed (UK GDPR applies).

1. Data We Collect

Account data: email address, username/display name, password (hashed), and your linked Steam ID.
Profile & content: team details, uploaded team logos, social links, and any match demos you upload.
Financial data: token purchases, wallet balance and transactions, and withdrawals. Card details are handled by Stripe — we do not store full card numbers.
Technical data: IP address, device/browser information, and usage/log data.
[Add anything else you collect — e.g. support correspondence, cookies analytics.]

2. How & Why We Use It

We use your data to operate accounts and teams, run tournaments, process payments and payouts, enforce fair play, provide support, and meet legal obligations. [State the UK GDPR legal basis for each purpose — e.g. contract, legitimate interests, legal obligation, consent.]

3. Third Parties & Processors

We share data with the following service providers strictly to run the platform:

Stripe — payment processing and Connect payouts (incl. identity/KYC for withdrawals).
DatHost — game server hosting for matches.
Steam / Valve — account authentication and identity.
Hosting/infrastructure — [name your host, e.g. Laravel Cloud / AWS, and object storage provider].
[Email/notification provider, analytics, etc.]

4. Cookies

[Describe the cookies you use — at minimum the session/authentication cookie — and any analytics. Add a cookie banner if you use non-essential cookies.]

5. Data Retention

[State how long you keep account, transaction, and log data — note financial records often must be kept for several years for tax/accounting.]

6. Your Rights

Under UK GDPR you have the right to access, correct, erase, restrict, or object to processing of your personal data, and to data portability. To exercise these, contact [privacy@bravepanic.com]. You may also complain to the UK Information Commissioner's Office (ICO).

7. International Transfers

[If any processor (e.g. Stripe/DatHost) transfers data outside the UK/EEA, describe the safeguards used.]

8. Children

The platform is not intended for, and may not be used by, anyone under [18 — confirm minimum age].

9. Changes

We may update this policy; the version published here is current.

10. Contact

Privacy questions or requests: [privacy@bravepanic.com].