Privacy Policy

The data controller for freshwipe.gg is Freshwipe Digital OÜ, registry code 17348026.

• Registered address: Aadli tn 4, Ülenurme alevik, 61714 Kambja vald, Tartu maakond, Estonia
• Privacy/legal contact: legal@freshwipe.gg
• Support contact: support@freshwipe.gg

Depending on how you use the service, we may collect:

• Account data: username, display name, email address, password hash, role, membership group, account status, 2FA status, and login history.
• Profile data: avatar, cover image, bio, favorite games, preferred regions, badges, level, favorites visibility, friends, LFG posts, pinned server, and notification preferences.
• Steam data: SteamID64, Steam profile URL, persona name, avatar URL, profile visibility, Steam verification state, and public game/playtime data where your Steam settings allow it. Steam does not provide your email address to us.
• Server owner data: claimed servers, claim requests, verification tokens, owner edits, structured rules, uploaded server images, Discord links, website links, wipe schedule, owner dashboard data, and support history.
• Server discovery data: public server names, IP addresses, ports, game, map, player count, tags, wipe information, query status, and history collected from public game server sources.
• Engagement data: favorites, votes, copy-IP clicks, listing views, page views, search/filter usage, Lazy Search usage, reports, and promotion interactions.
• Billing data: Stripe customer identifiers, subscription status, token purchases, promotion purchases, invoice references, billing name/company details where provided, and payment status. We do not store full card numbers.
• Support and moderation data: tickets, replies, screenshots or attachments, reports, admin notes, rejection reasons, ban/suspension history, and audit logs.
• Technical/security data: session identifiers, request metadata, IP addresses where available, user agent, timestamps, rate-limit events, failed login attempts, and security logs.

We use data to:

• Operate accounts, login, sessions, profiles, dashboards, favorites, friends, LFG, and support tickets.
• Discover, update, enrich, rank, and display public game server listings.
• Verify server ownership claims and prevent fraudulent claims.
• Process Plus subscriptions, token purchases, promotions, invoices, billing history, and payment support.
• Provide analytics, reports, ranking information, and owner growth tools.
• Prevent spam, abuse, fraud, vote manipulation, scraping, ban evasion, payment abuse, and security incidents.
• Moderate content, enforce our Terms and Acceptable Use Policy, and respond to reports or legal notices.
• Improve the service, understand feature usage, debug problems, and maintain reliability.

Where GDPR or similar privacy law applies, our legal bases may include:

• Contract: to provide accounts, server claims, Plus, tokens, promotions, support, and requested service features.
• Legitimate interests: to secure the platform, prevent abuse, moderate content, improve discovery quality, maintain logs, and understand service performance.
• Consent: for optional profile sharing, optional Steam-connected profile display where applicable, non-essential cookies/analytics where required, and marketing communications if introduced.
• Legal obligation: for accounting, invoices, tax records, payment compliance, legal requests, and regulatory obligations.

We use essential session cookies to keep users logged in and protect authentication flows. Steam login/linking uses a short-lived security cookie to protect the callback. The browser may also store preferences such as interface settings.

If we add non-essential analytics, advertising, or tracking cookies, we will update our cookie disclosures and add consent controls where required. See the Cookie and Session Policy.

We may share or process data with service providers that help us run freshwipe.gg, such as:

• Hosting/VPS, database, storage, CDN, backup, and infrastructure providers.
• Payment processors such as Stripe for checkout, subscriptions, payments, invoices, and billing portal features.
• Email providers used for account, support, legal, or billing communication.
• Steam/OpenID and Steam Web API for sign-in, account linking, Steam verification, and public Steam profile/library data where available.
• Analytics, logging, security, and error-monitoring providers if enabled.
• Legal, accounting, tax, security, or compliance advisers where needed.

We do not sell personal data as a standalone product.

Some information is public by design. Public profile information, usernames, badges, Steam verified status, favorite games, visible friends, LFG posts, server ownership, affiliate endorsements, server listings, votes/favorites counts, claimed owner labels, and listing content may be visible to other users depending on feature and settings.

Public game server data may be visible because it comes from public server directories or public query protocols.

We keep data only as long as reasonably needed for the purposes above, unless law requires a longer period.

• Account/profile data is kept while the account exists and for a reasonable period after deletion where needed for security, disputes, backups, or legal obligations.
• Billing, invoice, tax, and accounting records may be kept for at least 7 years after the end of the relevant financial year, or longer if required by law, accounting needs, disputes, or fraud prevention.
• Support tickets are normally kept for 24 months after closure so we can handle follow-up issues, disputes, billing questions, and repeat support context.
• Reports, claims, enforcement records, and ordinary moderation records may be kept while needed for platform safety. Serious moderation or security cases may be kept for up to 2 years after closure.
• Security logs, IP metadata, login metadata, rate-limit records, and fraud-prevention request metadata are normally kept for 180 days, unless they are part of a serious security, fraud, billing, legal, or moderation case.
• Backups may retain deleted data for a limited backup cycle, normally 30-90 days, before being overwritten.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also have the right to withdraw consent where processing is based on consent.

To make a privacy request, contact legal@freshwipe.gg. We may need to verify your identity before acting on a request.

If you are in the EU/EEA and believe your rights were not respected, you may have the right to complain to your local data protection authority, including the Estonian Data Protection Inspectorate.

We use technical and organisational measures intended to protect personal data, including password hashing, staff access controls, audit logging, rate limiting, and additional staff login protections where enabled.

Some providers may process data outside Estonia or the EEA. Where required, we rely on appropriate safeguards such as adequacy decisions, contractual safeguards, or provider compliance mechanisms.

freshwipe.gg is not intended for children below the age at which they can lawfully use online services without parental or guardian consent. Do not submit sensitive personal data unless specifically requested and necessary for a support, legal, or billing issue.

We may update this Privacy Policy as the product, legal requirements, or providers change. Material updates may be announced on the website, by email, or through in-app notices.