Privacy Policy

This policy describes how the website rank-serv.com (hereinafter "the Site") collects, uses, stores and protects the personal data of its users, in accordance with the General Data Protection Regulation (Regulation EU 2016/679, "GDPR") and the French Data Protection Act.

The data controller is Nicolas Peron, publisher of the Site. For any question about your data: contact@rank-serv.com.

The Site only collects the data needed to run its services. Depending on how you use it, this may include the following:

• Account: email address, username, password (stored in hashed form only), account creation date, email verification date and last login date.
• Profile (optional): avatar and social network handles you choose to provide (Discord, Twitch, X, Facebook, LinkedIn, Instagram, TikTok).
• Server listings: server name, IP address and port, website, description, banner, logo, presentation video and community links. This information is public by nature.
• Votes: username entered when voting, IP address, date and time of the vote.
• Server claims: IP address and port of the claimed server, temporary verification token.
• Technical data: IP address, date and time of requests, browser type, recorded in the server logs.

The Site does not collect any banking data or any sensitive data within the meaning of Article 9 of the GDPR. Please do not share such data in free-text fields (server description, username).

The information shown about a server's status (number of players, map, usernames of connected players) is obtained in real time by querying the game server, which makes it public. The Site displays it without storing it permanently.

Each processing activity relies on a legal basis provided for in Article 6 of the GDPR:

• Creating, authenticating and managing accounts, including sending verification and password reset emails: performance of the contract.
• Listing servers, displaying rankings and running the voting system: performance of the contract.
• Verifying ownership of a claimed server: performance of the contract.
• Detecting multiple or automated votes and preventing fraud: the Site's legitimate interest in keeping rankings reliable.
• Site security, content moderation and incident diagnosis: legitimate interest.
• Responding to requests from authorities: legal obligation.

The Site does not use your data for marketing purposes and does not send any newsletter.

To keep rankings fair, the Site records the IP address associated with each vote and enforces a minimum delay between two votes. The voting page is protected by an anti-bot system (Cloudflare Turnstile), which analyses technical signals from your browser to tell a human from an automated program.

These systems may cause a vote to be rejected. They produce no legal effect and no similarly significant effect within the meaning of Article 22 of the GDPR. You can dispute a rejection by writing to us.

• Account and profile data: for as long as the account exists. When the account is deleted, it is anonymised immediately: the email address and username are replaced with anonymous identifiers, the avatar and social networks are erased, and the account is permanently disabled.
• Votes (username and IP address): until the rankings are reset, on the 1st of each month. Only vote totals per server and per day, containing no personal data, are then kept for statistical purposes.
• Email verification and password reset links: 15 minutes.
• Unsuccessful server claim requests: deleted when they expire.
• Login session: 7 days at most without a new login.
• Technical logs: 14 days for web server logs. Application logs are limited in size and overwritten as they fill up.

Since server listings are public content, they may remain online after their owner's account is deleted, dissociated from the owner's identity. You can ask for them to be removed.

The Site uses no advertising cookies and no audience measurement tools. Only items strictly necessary for the Site to work are used; they do not require your consent.

• Session cookie (refresh_token): keeps you logged in. It is secure, inaccessible to scripts, restricted to the Site and expires after 7 days.
• Browser local storage: a simple flag remembers that you are logged in, so your session can be restored when the page loads. It contains no personal data.
• Cloudflare Turnstile: on the voting page, this anti-bot system may store technical items needed for the verification.

If audience measurement or advertising tools were to be added, your consent would be requested beforehand and this policy would be updated.

The Site does not sell, rent or transfer any personal data. Your data is only accessible to the Site's team and to the following technical providers, which act on its behalf:

• OVH SAS (France): hosting of the Site and its database.
• Cloudflare, Inc.: Turnstile anti-bot system on the voting page.
• Resend: sending of account verification and password reset emails. Only your email address is shared with it.
• Valve Corporation (Steam): the Site queries Steam's public services to list game servers. No data about you is shared with it.

Your data may also be disclosed to administrative or judicial authorities where required by law.

The Site's data is hosted in France. Some providers (Cloudflare, Resend) are established in the United States: the resulting data transfers are covered by the safeguards set out in Articles 44 et seq. of the GDPR, in particular the EU–U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

The Site implements appropriate technical and organisational measures to protect your data: password hashing, encrypted connections (HTTPS), a session cookie inaccessible to scripts, short-lived access tokens, restricted access to the administration area and checks on uploaded files.

You remain responsible for keeping your password confidential. Please report any suspicious use of your account to us without delay.

Creating an account is reserved for people aged 15 or over. If we learn that an account was created by a younger person without the consent of their legal guardians, it will be deleted. A parent can contact us to request this deletion.

Under the GDPR, you have the following rights over the data concerning you:

• Access: find out whether we process your data and obtain a copy of it.
• Rectification: correct inaccurate data. Your email, username, avatar and social networks can be edited directly from your profile.
• Erasure: delete your account from your profile, or ask us to do so.
• Objection: object to processing based on legitimate interest.
• Restriction: ask for processing to be temporarily frozen.
• Portability: receive your data in a structured, machine-readable format.
• Post-mortem instructions: decide what happens to your data after your death.

To exercise these rights, write to contact@rank-serv.com. You will receive a reply within one month, which may be extended by two months for a complex request. Proof of identity may be requested in case of reasonable doubt.

If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country of residence.

This policy may be updated to reflect changes to the Site or to the regulations. The date of the last update is shown at the top of the page. In the event of a significant change, registered users will be informed by email or by a message on the Site.