Privacy Policy

When you create or maintain a Pyroblast Account, we process information necessary to establish and administer your relationship with the Service.

This information may include:

• email address;
• username;
• display name;
• profile photograph or avatar;
• preferred language;
• account preferences;
• account status;
• account creation date;
• account modification history;
• communication preferences.

Certain information is mandatory for the creation and maintenance of an Account. Failure to provide such information may prevent us from providing the Service.

Pyroblast supports authentication through selected third-party identity providers.

Depending on the authentication method selected, we may receive:

• unique authentication identifier;
• verified email address;
• display name;
• profile picture;
• locale;
• authentication session identifier;
• access tokens;
• refresh tokens where technically required.

Authentication credentials, including passwords used with third-party identity providers, are never disclosed to Pyroblast.

Authentication is performed directly by the relevant provider.

Where you voluntarily connect supported gaming accounts, we process information made available through authorised APIs provided by the relevant gaming platform.

Depending on the platform, this information may include:

• platform account identifier;
• public profile information;
• gaming profile details;
• profile visibility settings;
• connected platform metadata.

Users may disconnect gaming accounts at any time through available account settings.

Gaming Data represents the core functionality of the Service.

Subject to permissions granted by the user and capabilities of the relevant platform, Pyroblast may process:

• owned games;
• gameplay statistics;
• achievements;
• trophies;
• playtime;
• recently played titles;
• gaming activity;
• wishlists;
• publicly available profile information;
• inventory information where supported;
• gameplay metadata;
• game completion statistics;
• platform-specific information made available through authorised APIs.

The categories of Gaming Data available to Pyroblast depend entirely on the permissions granted by the user and the technical capabilities of the relevant gaming platform.

Pyroblast does not circumvent privacy settings implemented by gaming platform providers.

Certain features of the Service rely upon artificial intelligence technologies.

Where a user requests AI-powered functionality, Pyroblast may process information necessary to generate:

• gameplay summaries;
• activity recaps;
• profile summaries;
• gaming personality descriptions;
• gameplay recommendations;
• achievement highlights;
• statistical explanations;
• future AI-powered functionality.

AI-generated content is automatically produced and may not always be complete, accurate or current.

AI-generated outputs should not be interpreted as factual statements, professional advice or official information supplied by gaming platform providers.

Users may voluntarily submit content through the Service.

User Content may include:

• profile descriptions;
• profile avatars;
• chat messages;
• reactions;
• comments;
• uploaded images;
• uploaded files;
• links;
• future community content.

Users remain solely responsible for the legality and accuracy of User Content submitted through the Service.

Where users communicate with Pyroblast, we process information necessary to respond appropriately.

Such information may include:

• support requests;
• customer correspondence;
• bug reports;
• feature requests;
• abuse reports;
• moderation reports;
• feedback;
• communication history.

Communications may be retained where reasonably necessary to comply with legal obligations, resolve disputes, investigate abuse or improve customer support.

When the Service is accessed, certain technical information is generated automatically.

This information may include:

• IP address;
• browser type;
• browser version;
• operating system;
• device type;
• screen resolution;
• language settings;
• time zone;
• session identifiers;
• application version;
• diagnostic information;
• crash reports;
• performance metrics.

This information assists us in maintaining the reliability, security and performance of the Service.

Pyroblast analyses how the Service is used in order to improve functionality and user experience.

Usage Information may include:

• pages visited;
• features accessed;
• gameplay analytics viewed;
• AI features used;
• session duration;
• interaction history;
• navigation behaviour;
• feature adoption;
• application performance.

Where reasonably practicable, Usage Information is aggregated or anonymised before analytical processing.

To protect the integrity of the Service, Pyroblast processes certain security-related information.

This may include:

• login history;
• authentication events;
• failed authentication attempts;
• password reset events;
• suspicious activity indicators;
• abuse reports;
• security alerts;
• fraud prevention information;
• account recovery history;
• moderation records.

Such processing is necessary to protect users, investigate misuse and maintain the security of the Service.

Pyroblast is not designed to collect special categories of Personal Data within the meaning of Article 9 GDPR.

Accordingly, users should not intentionally submit information relating to:

• racial or ethnic origin;
• political opinions;
• religious or philosophical beliefs;
• trade union membership;
• genetic data;
• biometric data used for identification purposes;
• health information;
• information concerning sex life or sexual orientation.

If such information is submitted inadvertently, it will be processed only where strictly necessary to provide the Service, comply with applicable law or protect legal rights.

Users provide information directly when they:

• register an Account;
• update profile information;
• connect gaming accounts;
• communicate with customer support;
• participate in community features;
• submit User Content;
• provide feedback;
• report abuse;
• contact the Company.

Where users authenticate using third-party identity providers, Pyroblast receives information directly from those providers in accordance with permissions granted by the user.

Supported providers may include:

• Google;
• Facebook;
• Steam;
• Discord;
• Apple;
• Microsoft;
• additional providers introduced in the future.

The information received depends upon the permissions granted by the user and the policies of the relevant provider.

Gaming Data is obtained directly from connected gaming platforms following user authorisation.

Depending upon the connected platform, this may include information received through:

• Steam Web API;
• PlayStation Network integrations;
• Xbox services;
• Battle.net Developer APIs;
• Twitch APIs;
• additional gaming platform integrations supported by the Service.

Pyroblast only retrieves information that has been made available through authorised APIs and user-granted permissions.

Certain Personal Data is generated automatically through the operation of the Service.

This includes technical, analytical, diagnostic and security information produced during the normal operation of the platform.

Such information is generated by Pyroblast infrastructure and authorised service providers acting on behalf of the Company.

Personal Data is processed where necessary to provide the functionality requested by the user, including to:

• create and maintain user accounts;
• authenticate users;
• connect authorised gaming platform accounts;
• synchronise gameplay information;
• generate gameplay analytics;
• display user profiles;
• provide AI-powered features;
• enable community functionality;
• facilitate private messaging;
• personalise user experience;
• maintain user preferences.

Without this processing, the Service or certain features of the Service may not function properly.

Pyroblast processes Gaming Data to enable the principal functionality of the Service.

Processing activities include:

• synchronising gaming libraries;
• retrieving achievements and trophies;
• displaying gameplay statistics;
• calculating gaming metrics;
• generating AI-powered insights;
• generating gameplay summaries;
• comparing gameplay history;
• supporting future gaming functionality.

Gaming Data is processed only after a user has voluntarily connected the relevant gaming account and authorised access through the applicable platform.

Where users utilise AI-powered functionality, Personal Data may be processed to:

• generate gameplay summaries;
• generate activity recaps;
• explain gameplay statistics;
• produce gaming recommendations;
• generate profile summaries;
• identify gameplay trends;
• produce gaming personality descriptions;
• support future AI-powered functionality.

Pyroblast seeks to minimise the amount of information submitted for AI processing and limits processing to information reasonably necessary for the requested functionality.

Where community functionality is available, Personal Data is processed to:

• display user profiles;
• enable user interactions;
• deliver private messages;
• display comments;
• process reactions;
• investigate abuse reports;
• moderate content;
• enforce Community Guidelines.

Community functionality is intended to improve user interaction while maintaining a safe environment for all users.

Personal Data is processed to:

• respond to enquiries;
• investigate technical issues;
• resolve user complaints;
• provide customer assistance;
• verify user identity where necessary;
• communicate regarding Service functionality.

Support communications may be retained where reasonably necessary for quality assurance, legal compliance or dispute resolution.

Maintaining the security of the Service is a fundamental operational requirement.

Personal Data may therefore be processed to:

• detect fraudulent activity;
• investigate suspected misuse;
• identify unauthorised access;
• protect user accounts;
• detect malicious software;
• monitor platform integrity;
• investigate security incidents;
• prevent abuse;
• enforce the Terms of Service.

Security-related processing is conducted only where reasonably necessary to protect users, the Service or the Company.

Pyroblast continuously develops and improves its functionality.

Personal Data may therefore be processed in order to:

• analyse usage trends;
• evaluate new features;
• improve usability;
• optimise performance;
• improve accessibility;
• identify software defects;
• improve AI performance;
• develop future functionality.

Where reasonably practicable, aggregated or anonymised information is used for analytical purposes.

Personal Data may also be processed where necessary to:

• comply with applicable legislation;
• comply with lawful requests from competent authorities;
• establish, exercise or defend legal claims;
• comply with accounting and tax obligations;
• enforce contractual rights;
• comply with judicial or regulatory orders.

Personal Data may be processed where reasonably necessary for the legitimate administration of the Company’s business, including:

• internal governance;
• auditing;
• financial reporting;
• corporate restructuring;
• financing transactions;
• investment due diligence;
• mergers or acquisitions.

Where possible, aggregated or anonymised information is used for these purposes.

The majority of processing activities carried out by Pyroblast are necessary for the performance of the contract concluded between the user and the Company.

This includes processing necessary to:

• register an Account;
• authenticate users;
• provide access to the Service;
• connect Gaming Accounts;
• retrieve Gaming Data;
• generate AI-powered features;
• provide messaging functionality;
• maintain user preferences;
• deliver customer support;
• provide premium subscription services.

Failure to provide Personal Data necessary for these purposes may prevent the Company from providing the requested Service.

Certain processing activities are based upon the Company’s legitimate interests, provided that such interests are not overridden by the rights and freedoms of the user.

Legitimate interests include:

• maintaining platform security;
• preventing fraud;
• improving the Service;
• developing new features;
• analysing Service performance;
• protecting users;
• enforcing contractual rights;
• maintaining business continuity;
• quality assurance;
• network and information security.

Whenever Legitimate Interests are relied upon, Pyroblast performs an assessment to ensure that appropriate safeguards protect the rights of users.

Personal Data may be processed where required to comply with applicable legal obligations.

Examples include:

• tax obligations;
• accounting obligations;
• court orders;
• regulatory investigations;
• lawful requests from competent public authorities;
• record keeping required by law.

Certain processing activities are carried out only where the user has provided valid consent.

Consent may be requested for:

• non-essential cookies;
• optional analytics technologies where required by law;
• marketing communications;
• future optional integrations;
• future AI functionality requiring additional consent under applicable legislation.

Users may withdraw consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

In exceptional circumstances, Personal Data may be processed where necessary to protect the vital interests of an individual.

Such circumstances are expected to arise only rarely.

Where more than one legal basis applies, Pyroblast may rely upon multiple lawful bases simultaneously where permitted under applicable legislation.

The legal basis applicable to any particular processing activity depends upon the nature of the information processed and the purpose for which it is used.

Pyroblast uses cloud infrastructure providers to host and operate the Service.

These providers may process infrastructure-related Personal Data, including technical information necessary for hosting, storage, security and system availability.

Current providers include:

• Vercel — application hosting, serverless functions, deployment;
• Cloudflare — DNS, network security and traffic management;
• Supabase — database hosting;
• Prisma — database access layer.

These providers process Personal Data solely for the purpose of providing infrastructure services to Pyroblast.

Authentication is provided through trusted third-party identity providers selected by the user.

Supported providers currently include:

• Google
• Facebook
• Steam
• Microsoft
• Apple (where available)
• Discord (where available)

Authentication providers determine which Personal Data is shared with Pyroblast based upon:

• the permissions granted by the user;
• the provider's privacy settings; and
• the provider's own privacy policy.

Pyroblast never receives or stores passwords used with these providers.

Pyroblast retrieves Gaming Data from authorised gaming platform APIs after receiving the user’s authorisation.

Current gaming integrations include:

• Steam Web API
• Xbox Services
• PlayStation Network
• Battle.net
• Twitch
• IGDB
• RAWG

The categories of Gaming Data available depend entirely upon:

• the gaming platform;
• the permissions granted by the user; and
• the functionality made available through the relevant API.

Pyroblast cannot retrieve information that is not made available through authorised integrations.

Certain features of the Service rely upon third-party artificial intelligence providers.

These providers process only the information reasonably necessary to generate the functionality requested by the user.

Current providers include:

• OpenAI — AI-generated summaries, recommendations and gameplay insights.

Pyroblast does not intentionally submit information that is unnecessary for generation of AI outputs.

Where technically feasible, prompts are minimised before transmission.

Transactional communications may be delivered through third-party communication providers.

Current providers include:

• Resend — transactional email delivery.

These communications include:

• verification emails;
• password reset emails;
• account notifications;
• security alerts;
• customer support communications.

Pyroblast does not currently send marketing communications unless separately authorised by the user where required by applicable law.

The Company analyses usage of the Service in order to improve performance and reliability.

Current providers include:

• Vercel Analytics — service analytics.

Analytics information is used exclusively for operational and product improvement purposes.

Pyroblast does not currently use behavioural advertising platforms.

The Company uses specialised monitoring tools to identify technical issues affecting the Service.

Current providers include:

• Sentry — error reporting and diagnostics.

Diagnostic information is used exclusively to maintain stability, investigate incidents and improve reliability.

Where paid subscriptions become available through Pyroblast Plus, payment processing will be performed by specialised payment providers.

Payment card details are processed directly by specialised payment providers. Pyroblast does not store complete payment card information.

Where users access affiliate links made available through the Service, the relevant third party may process Personal Data in accordance with its own privacy practices.

Any processing performed by affiliate providers is governed by their own privacy documentation.

If the Company is involved in a merger, acquisition, investment, corporate restructuring, sale of assets or similar corporate transaction, Personal Data may be transferred as part of that transaction, subject to applicable law and appropriate safeguards where required.

Where required by applicable law, affected users will be informed of such transfer.

The Company implements appropriate technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Data.

Such measures may include, where appropriate:

• encryption of data in transit;
• access control mechanisms;
• authentication procedures;
• logging and monitoring;
• secure software development practices;
• vulnerability management;
• incident response procedures;
• regular security assessments.

Access to Personal Data is limited to authorised personnel and authorised service providers who require such access in order to perform their duties.

The Company periodically reviews and updates its security measures to address evolving technological, operational and regulatory requirements.

Although the Company applies appropriate safeguards designed to protect Personal Data, no method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, the Company cannot guarantee absolute security.

In the event of a Personal Data Breach, the Company will respond in accordance with applicable law and, where required, notify the competent supervisory authority and affected individuals within the timeframes prescribed by applicable legislation.

Unless otherwise required by applicable law, the Company generally applies the following retention periods.

• Account Information — until account deletion plus up to 30 days for recovery and fraud prevention;
• Connected Gaming Accounts — until disconnected or account deletion;
• Gaming Data — until account deletion;
• AI Summaries — until account deletion or earlier deletion by the user, where available;
• Chat Messages — until account deletion; messages may remain in conversations with the sender anonymised where necessary to preserve conversation integrity or comply with legal obligations;
• Customer Support Records — up to 3 years after the support request is closed;
• Security Logs — up to 12 months, unless longer retention is required for incident investigation or legal compliance;
• Error Logs — up to 90 days;
• Analytics Data — up to 13 months where identifiable; aggregated analytics may be retained for longer where no longer identifiable;
• Billing Records — as required by applicable accounting and tax legislation.

The Company reserves the right to retain Personal Data for longer periods where required by applicable law or where necessary to establish, exercise or defend legal claims.

You may request confirmation as to whether Personal Data relating to you is processed by Pyroblast.

Where Personal Data is processed, you may request access to:

• the categories of Personal Data processed;
• the purposes of processing;
• the categories of recipients;
• the expected retention period;
• the source of the Personal Data where it was not obtained directly from you;
• information regarding international transfers;
• a copy of the Personal Data undergoing processing.

The exercise of these rights may be subject to conditions, limitations and exceptions provided under applicable law.

The Company may decline or restrict access where permitted by applicable law, including where disclosure would adversely affect the rights and freedoms of others.

You may request correction of inaccurate or incomplete Personal Data.

Where technically possible, certain Personal Data may also be updated directly through your Account settings.

Subject to applicable law, you may request deletion of Personal Data where:

• the Personal Data is no longer necessary for the purposes for which it was collected;
• consent has been withdrawn and no other legal basis applies;
• the processing is unlawful;
• deletion is required by applicable law; or
• you successfully object to processing based upon legitimate interests.

The right to erasure is not absolute.

Certain Personal Data may continue to be retained where necessary to:

• comply with legal obligations;
• establish, exercise or defend legal claims;
• investigate fraud or abuse;
• protect the security and integrity of the Service.

Where permitted by applicable law, you may request that processing of Personal Data be restricted.

During any restriction period, Personal Data will generally only be stored unless further processing is required by law or otherwise authorised.

Where processing is based upon consent or the performance of a contract and carried out by automated means, you may request a copy of certain Personal Data in a structured, commonly used and machine-readable format.

Where technically feasible, you may also request transmission of such information directly to another controller.

You may object to processing carried out on the basis of the Company’s legitimate interests.

Where a valid objection is received, the Company will cease processing unless compelling legitimate grounds exist or processing is required for the establishment, exercise or defence of legal claims.

Where processing is based upon consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing undertaken before consent was withdrawn.

Pyroblast does not use Personal Data to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning users.

Although certain features use artificial intelligence to generate recommendations, summaries and analytical insights, such outputs are intended solely to assist users and do not constitute automated decision-making within the meaning of Article 22 GDPR.

Users remain solely responsible for any decisions made on the basis of AI-generated information.