Datenschutzerklärung
Last updated: July 2026
This Privacy Policy explains how FPSpilot processes the personal data of its users in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPD-GDD).
1. Data controller
| Identity | FPSpilot |
|---|---|
| Tax ID | ES76433097A |
| Address | Spain |
| Privacy contact | privacy@fpspilot.com |
2. Personal data we process
| Category | Specific data | When collected |
|---|---|---|
| Account data | Username, email address, password (stored as an irreversible bcrypt hash) | On registration |
| Profile data (optional) | Avatar photo, biography, social links (YouTube, Twitch, Twitter/X, Instagram, TikTok), language preference | If the user adds them voluntarily |
| User-generated content | Hardware builds (name, description, component list, approximate prices, setup photos), game performance data (FPS, resolution, quality setting) | When creating or editing a build |
| Communications | Email address for transactional emails (account verification, password recovery) | On registration or password reset request |
| Technical data | IP address, browser type, OS, server access logs. These data are not crossed with user profiles or used for advertising. | Automatically on each request |
We do not collect special-category data (health, beliefs, ethnicity, etc.) or data from users under 14.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and managing your user account; authentication | Performance of contract (Art. 6.1.b) |
| Displaying your public profile and builds to other users | Performance of contract (Art. 6.1.b) — a public profile is a core feature of the service |
| Sending transactional emails (verification, password reset) | Performance of contract (Art. 6.1.b) |
| Platform security: detecting unauthorised access, blocking abusive accounts, maintaining logs | Legitimate interests (Art. 6.1.f) — protecting the service and other users |
| Compliance with legal obligations (responding to competent authorities) | Legal obligation (Art. 6.1.c) |
FPSpilot does not use automated decision-making with significant effects on individuals, and does not profile users for advertising. We do not sell, share or rent personal data to third parties.
4. Recipients and processors
| Provider | Data shared | Purpose | Location |
|---|---|---|---|
| Hostinger International Limited | All server-side stored data (database, server files) | Web hosting (VPS) | France (EU) |
| Resend Inc. | Email address | Transactional email delivery | USA — transfer covered by Standard Contractual Clauses (SCCs) approved by the European Commission |
Regarding affiliate programmes (Amazon, PcComponentes, Coolmod, others): when you click an affiliate link and complete a purchase, the store may track that conversion via its own system (store tracking cookies, URL parameters). This tracking is outside our control; please review the privacy policy of each store.
5. International data transfers
Data is stored on servers in France (European Union). The only transfer outside the EEA occurs when sending transactional emails via Resend Inc. (USA), covered by the Standard Contractual Clauses adopted by Commission Implementing Decision 2021/914. Contact us at privacy@fpspilot.com for further information.
6. Retention periods
| Data category | Retention period |
|---|---|
| Account and profile data | For the lifetime of the account. Deleted within 30 days of a deletion or deregistration request. |
| User-generated content (builds, performance data) | Tied to the account. Deleted with it, unless the user removes the content first. |
| Server logs (technical data) | Up to 12 months, for security and incident analysis only. |
| Data for legal obligations | Up to 5 years, in accordance with applicable Spanish law. |
7. Your rights
Under the GDPR and LOPD-GDD, you have the right to:
- Access: request confirmation of whether we process your data and obtain a copy.
- Rectification: correct inaccurate or incomplete data (you can also do this yourself from your profile).
- Erasure ("right to be forgotten"): request deletion of your account and data when they are no longer necessary.
- Objection: object to processing based on legitimate interests.
- Restriction: ask us to suspend processing while verifying a claim.
- Portability: receive your data in a structured, machine-readable format.
- Not to be subject to automated decisions: FPSpilot does not make automated decisions with significant effects on users.
To exercise any of these rights, write to privacy@fpspilot.com stating your username and the right you wish to exercise. We will respond within one month (extendable by two months for complex cases).
If you believe the processing of your data does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es.
8. Security
We apply reasonable technical and organisational measures to protect your data: passwords are always stored as bcrypt hashes (never in plain text), all communications use HTTPS/TLS, the server has perimeter firewall protection, and database access is restricted to the server itself. No system is 100% secure; if you find a vulnerability, please contact privacy@fpspilot.com.
9. Children
FPSpilot is not directed at users under 14. We do not knowingly collect data from children below that age. If you become aware that a child under 14 has registered, please notify us at privacy@fpspilot.com so we can delete the account.
10. Changes
We may update this Privacy Policy. For material changes, we will notify you by email or with a prominent notice on the site. The "Last updated" date at the top of this document shows when it was last modified.