Privacy Policy

This privacy policy explains how the publisher of GOLEM Six processes your personal data when you use golemsix.com.

1 — Data controller

The data controller is the publisher of the site, a natural person acting in a non-professional capacity, who can be reached at the address below for any question about your data.
Contact: support@golemsix.com

2 — Data collected and purposes

The publisher collects and processes the following data:

• Registration data : username, email address and hashed password, except for accounts created with Google or Discord, which have none until you set one. This data is required to create and manage your account.
• Sign-in with Google or Discord, optional : if you choose this sign-in method, the service sends us its account identifier, your email address and whether it is verified, your display name and your profile picture. The identifier is used to recognize you on later sign-ins, the email to create or find your account, and the picture as your avatar when no Ubisoft avatar is found. No other data from these accounts is accessed, and you can unlink these services from your profile.
• Ubisoft account, optional : Ubisoft username and gaming platform, if you provide them, along with the associated avatar and public statistics when this feature is active. They are used to display your player profile.
• Content and activity : strategies, tactical plans, shared tier lists, tips and their images or videos, comments, votes and likes, callout proposals, session attendance, messages exchanged in sessions, group memberships and invitations. This data is required for the features you use.
• Tier lists made without an account : only the ranking and its date are stored. It is not linked to any account and contains no personal data. Your IP address is only used, in memory, to limit the number of shares.
• Technical data : IP address and connection logs, used for site security, login attempt limiting and abuse prevention.

3 — Data recipients

Your data is intended for the publisher to operate the site. It is never sold or transferred for commercial purposes. The following providers process it within the limits of their service:

• Hosting : Contabo GmbH, Germany. All site data is stored there, including audience statistics, measured by a tool installed on the same server.
• Email delivery : Resend, Inc., United States, receives your email address and the content of transactional messages — password reset, group invitations, data export. This transfer outside the European Union is covered by the safeguards set out in articles 44 and following of the GDPR.
• Sign-in with Google or Discord : if you use this sign-in method, Google LLC or Discord Inc., United States, know that you are signing in to GOLEM Six. These services then process your data under their own privacy policies.
• Game statistics : when this feature is active, your Ubisoft username and platform are sent to a third-party Rainbow Six Siege statistics service to retrieve your public game data.
• Embedded videos : YouTube and TikTok videos shown in strategies, tips and the wiki are loaded from these platforms, which then receive your IP address.

Content you publish publicly — tips, public strategies, comments — and your username are visible to other visitors of the site.

4 — Retention periods

• Account data : kept as long as the account is active. When the account is deleted, it is erased immediately and permanently, along with the attached content.
• Authentication cookie : 7 days.
• Password reset link : valid for 7 days at most, invalidated as soon as it is used.
• Technical logs : retained for a maximum period of 12 months.

5 — Cookies

A cookie is a small text file stored on your device. GOLEM Six keeps their use to what is strictly necessary.

• Session cookie : This httpOnly cookie keeps your session active and secures your browsing. It is strictly necessary for the service you have requested.
  • Retention period: 7 days.
• Google or Discord sign-in cookies : during a sign-in with these services, an httpOnly cookie keeps the state of the request to verify its return, and a second one holds the received profile until sign-up is complete. They expire after 10 and 15 minutes and are deleted as soon as they have been used.
• Local storage : some display preferences, such as the filters on the strategies and plans pages, are saved in your browser's local storage. They never leave your device.
• Third-party video players : embedded YouTube and TikTok players may set their own cookies, governed by those platforms' policies.

Audience measurement relies on Umami, hosted by the publisher on the same server as the site. Umami sets no cookies and collects no data that can identify you: traffic statistics are aggregated and anonymous, and are not shared with any third party. No advertising or tracking cookies are used.

6 — Security

The publisher implements the necessary technical measures to protect your data against unauthorised access or loss:

• Passwords protected by irreversible hashing
• Server-side sessions, revocable at any time, and HttpOnly cookie
• Communications encrypted via HTTPS/TLS
• Data hosted in Europe
• Access protection via rate limiting

7 — Your rights

In accordance with applicable European regulations, you have the following rights regarding the processing of your personal data:

• Right of access : You can obtain information about the data we hold about you and request a copy.
• Right to rectification : You can update your information at any time via the Profile section.
• Right to erasure : You can delete your account at any time from your profile settings, which will result in the permanent deletion of your data.
• Right to restriction and objection : You can object to the processing of your data or request its restriction under certain legal conditions.
• Right to data portability : You have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format.

How to exercise your rights:

• Automated data export : To facilitate your right to portability, an export button is available directly from your Profile settings. For security, the file containing your data will be sent only to the email address associated with your GOLEM Six account. This feature is limited to once every 30 days.
• Other requests : For any other request relating to your rights, you can contact us by email at support@golemsix.com. The Publisher undertakes to process your request within a maximum of 30 days.

If, after contacting us, you believe your data rights are not being respected, you can lodge a complaint with the relevant data protection authority.

8 — Minors

Access to the service is reserved for persons aged 15 or over. GOLEM Six does not knowingly collect data from minors under the age of 15.

9 — Changes

This policy may be updated. Users will be informed of material changes by email or via a notification on the site.