Your data and rights
Privacy policy
This policy explains what data GTARank processes, why and how to exercise your rights.
Last updated: 23 July 2026
Controller
Controller: GTARank S.L.. Address: Calle Carles Buigas 6. Privacy contact: support@gtarank.com.
Data processed
We process registration and profile data, protected credentials, sessions and security data, together with votes, reviews, favourites, submitted servers, claims, moderation messages and preferences.
Purposes and legal bases
Data is used to provide requested account features, verify email, manage servers, prevent abuse, moderate content and meet legal duties. Bases include performance of the service, legitimate interests in security and moderation, legal obligations and consent where applicable.
Retention and recipients
Data is kept while the account or relationship is active and as needed for security, claims and legal duties. Deleted reviews are erased. Hosting, email, CDN and external-content providers may process necessary data under their own terms.
External sign-in providers
If you choose Google sign-in, Google provides GTARank with a stable account identifier, verified email and, when available, your name and profile picture. We never receive your Google password. The link is retained until you disconnect it or delete your account.
Voting with Steam or Discord
You do not need a GTARank account to vote. Steam or Discord provides only the stable identifier needed to prove your identity; we never receive your password. GTARank normalises it and retains only a pseudonymised HMAC hash, together with the date, voted server and technical anti-fraud signals. The voting identity and technical fingerprints are deleted or anonymised after 30 days of inactivity. If a server uses the rewards API, it securely compares its players' identifiers with GTARank: it receives neither voter lists nor the stored identifier. The fact that a reward was claimed is retained to prevent duplicate delivery and preserve vote traceability.
Abuse protection
Sensitive public forms use Cloudflare Turnstile to distinguish legitimate traffic from automation. Cloudflare may process technical browser and connection signals exclusively for security purposes. This control is necessary to protect accounts, email and infrastructure.
Your rights
You may request access, rectification, erasure, restriction, objection and portability at support@gtarank.com. You may also complain to the Spanish Data Protection Agency.
Security and changes
We apply reasonable technical and organisational safeguards, although no system is infallible. Material changes will be communicated on this page or through account channels.