Privacy Policy
Effective date: 2026-09-19
PUBG History Operator ("we", "us") operates PUBG History (the "Service"). This policy explains what personal information the Service collects, why, how long we keep it, who processes it on our behalf, and the choices you have.
1. Information we collect
You can browse most records without an account. We collect the following only when you sign up or sign in.
| Category | Data | When and how |
|---|---|---|
| Email sign-up | Email address, password, nickname, nationality (required) | Entered in the sign-up form. Passwords are stored only in hashed form. |
| Google sign-in | Google account identifier, email address, and basic profile details Google shares (such as name and profile picture, depending on your Google settings); nickname and nationality you enter afterward | Received from Google when you authenticate; nickname and nationality are collected on your first sign-in. |
| Usage data | Favorite teams and players, prediction votes, point history | Created when you use those features. |
| Account security | Two-factor authentication (TOTP) enrollment data | Only if you enable two-factor authentication in My Page. |
| Automatically collected | Sign-in success / failure / lockout and account-deletion records (email, user ID, IP address, browser user-agent, timestamp), server access logs, cookies | Generated automatically when you sign in, delete your account, or use the Service. |
We do not collect national ID numbers, phone numbers, or payment information.
2. How we use it
- Identify you, verify your email, and manage your sign-in and account
- Prevent duplicate nicknames and show profile details such as nationality
- Provide personalization: saved favorites, prediction participation, and point settlement
- Keep the Service secure: detect brute-force or fraudulent sign-ins, apply sign-in lockouts, and investigate account takeover
- Send messages needed to operate the Service, such as password-reset emails
- Comply with legal obligations and handle disputes
3. Retention
We delete personal information without undue delay once the purpose is fulfilled.
| Data | Retention |
|---|---|
| Account, profile, favorites, prediction votes, point history | Until you delete your account. Deleting it in My Page removes them immediately. |
| Sign-in and deletion records (including IP address) | Automatically deleted 90 days after they are recorded. They may be retained for that period after you delete your account, for security purposes. |
| Server access logs kept by hosting and infrastructure providers | According to each provider's policy |
Where the law requires us to keep information longer, we keep it for that period only. Copies in system backups are removed as backups rotate.
4. Sharing
We do not sell your personal information or hand it to third parties, except with your consent or when law enforcement lawfully requires it.
5. Service providers and international transfers
We rely on the providers below. Your information may therefore be processed and stored on servers outside your country, including outside South Korea. You may refuse the transfer, but then you cannot use features that depend on it, such as sign-up and sign-in.
| Provider | Purpose | Data | Location | Method |
|---|---|---|---|---|
| Supabase, Inc. | Authentication, database and file storage, authentication emails | Account, profile, usage data, and sign-in records | United States and other regions, depending on our project settings | Encrypted transmission whenever you use the Service |
| Vercel Inc. | Website hosting and server access logs | IP address, browser details, request contents | United States and other regions | Whenever you use the Service |
| Cloudflare, Inc. | Turnstile bot protection on sign-in and sign-up | IP address, browser details, and other signals used to detect bots | United States and other regions | When you open the sign-in or sign-up screen |
| Google LLC | Google sign-in and advertising (AdSense) | Account data at Google sign-in; advertising cookies and device data | United States and other regions | When you use those features |
Each provider processes data under its own privacy policy. We take care that it is used only to provide the Service.
7. Public tournament and player information
To document PUBG tournament history, the Service publishes players' and teams' nicknames, team affiliation, nationality, and results. Some player pages may also show a real name or date of birth taken from public sources. If you are listed and want your information corrected or removed, email us at the address below and we will act on it promptly after checking.
8. Your rights
You may access, correct, delete, or restrict the processing of your personal information, and withdraw your consent, at any time. Depending on where you live (for example under the GDPR), you may have additional rights such as data portability or the right to object.
- View and edit your profile (nickname, nationality), manage favorites, change your password or email, and set up two-factor authentication in My Page.
- Delete your account yourself under "Delete account" in My Page. Your profile, settings, prediction votes, and point history are deleted immediately.
- For anything else, email pubghistory2026@gmail.com. We will verify your identity and respond without undue delay.
9. Security
- Passwords are stored hashed; we cannot read them.
- All traffic is encrypted over HTTPS.
- Database access is restricted, and row-level security ensures members can reach only their own data.
- Temporary sign-in lockouts after repeated failures, CAPTCHA, and optional two-factor authentication protect accounts from takeover.
- Access to personal information is limited to what is necessary.
10. Children
The Service is not for children under 14, and we do not knowingly collect their information. If we learn that we have, we delete it promptly.
11. Contact
| Item | Details |
|---|---|
| Privacy officer | PUBG History Team |
| pubghistory2026@gmail.com |
Send questions, complaints, and requests about your personal information to the address above. If you are in South Korea and are not satisfied, you may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).
12. Changes to this policy
If we change this policy, we will post a notice in the Service at least 7 days before the change takes effect (30 days for changes that are unfavorable to you). This policy applies from the effective date shown above.