AACGUARD GDPR Notice

1. Scope of this GDPR notice

This GDPR notice applies to the AACGUARD website, web panel, related APIs, contact forms, support channels, payment-related flows where applicable, and other connected services that involve the processing of personal data.

It should be read together with our Privacy Policy, Cookies Policy, and Terms of Use.

2. Data controller and contact details

For the purposes of the GDPR, the data controller for AACGUARD is Pelea Raul-Daniel, acting as a natural person owner of the aacguard.com domain and the AACGUARD application.

AACGUARD is operated from Cluj-Napoca, Romania. Privacy-related questions, access requests, correction requests, deletion requests, and other GDPR inquiries may be submitted to:

3. Who this notice applies to

This notice applies to website visitors, server administrators, account holders, support contacts, paying customers where applicable, and players whose scan-related data may be submitted to or reviewed through AACGUARD.

AACGUARD is an international service. GDPR protections may apply where required by law, including where AACGUARD offers services to individuals in the European Economic Area or otherwise falls within the territorial scope of the GDPR.

4. Categories of personal data we may process

Depending on how AACGUARD is used, we may process the following categories of personal data:

• Account and identity data, such as usernames, account email addresses, login-related details, and administrator profile information.
• Game-related identifiers, such as Steam ID, Steam display name, server context, and related moderation identifiers.
• Scan-related metadata, such as scan timestamps, triggered modules, scores, verdicts, the scan log, a masked IP address, a one-way hardware fingerprint, and review context.
• Desktop sign-in data: a hash of the app session token, its expiry and last use, the app version and the IP address it signed in from.
• AACGuard Live data (everyone running the app): session id, game, server address, live status, short finding descriptions, client version and session times; when not signed in, also the Steam ID and name of the Steam account on the PC and a one-way hash of the IP address (to limit abuse).
• Only when you press the button in the app: a false-positive report (one finding with its file path, why it was flagged and your note) or a pre-match check link (verdict, number of findings, game, app version), with your SteamID64, Steam name and a keyed hash of your IP address (to limit abuse).
• Public gaming statistics linked to your SteamID64, fetched from Steam, FACEIT and Leetify to build your profile.
• Technical and security data, such as IP addresses, browser type, device data, operating system details, logs, and anti-abuse signals.
• Communication data, such as messages sent through contact forms, support requests, business inquiries, or abuse reports.
• Cookie, consent, and preference data collected through website consent and settings tools.
• Analytics and usage data, such as page views, interactions, referral information, performance data, and approximate location insights.
• AACGUARD PRO payment data: plan, amount, currency, PayPal order and capture references, the payer e-mail address returned by PayPal, payment dates, and your PRO status and end date. We never receive card or bank details.

AACGUARD does not present its standard website and service flows as intentionally collecting special category personal data.

5. Where personal data comes from

Personal data may be obtained directly from you, automatically through your use of the website or related services, from administrators who operate servers using AACGUARD, from payment or infrastructure providers where applicable, and from technical systems involved in security, moderation, support, fraud prevention, and service delivery.

6. Why we process personal data

We process personal data to operate and secure AACGUARD, provide access to accounts and dashboard features, review scan results, support moderation workflows, respond to inquiries, maintain logs, process payments where applicable, comply with legal obligations, improve service performance, and protect the integrity of the platform.

We may also process data to prevent abuse, investigate suspicious activity, troubleshoot failures, enforce our Terms of Use, and maintain reliable infrastructure and support operations.

8. Who may receive personal data

Personal data may be accessible to authorized AACGUARD personnel or contractors where necessary, as well as hosting and infrastructure providers, analytics providers, security and anti-abuse vendors, communication or support providers, embedded content providers, and payment processors where applicable.

Depending on the service involved, such parties may act as processors, service providers, or independent controllers for their own functions and compliance obligations.

9. International transfers

Some service providers used by AACGUARD may process personal data outside the European Economic Area. Where that occurs, transfers are intended to rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, or equivalent legal mechanisms where required.

Because AACGUARD is an international digital service, cross-border processing may occur through cloud hosting, analytics, security tools, embedded services, support systems, or payment providers.

10. Data retention

AACGUARD keeps personal data only for as long as reasonably necessary for the purposes described in this notice, including service delivery, security, moderation review, legal compliance, dispute handling, accounting, and legitimate operational needs.

Retention periods may vary depending on the category of data, the feature involved, the sensitivity of the information, and whether the data is needed for fraud prevention, support history, legal defense, or regulatory obligations.

• Desktop sign-in sessions: until you sign out, or 90 days after sign-in at the latest.
• Scan history and AACGuard Live sessions: kept for anti-cheat and moderation purposes and not deleted automatically today; deletion requests are handled as described in the Privacy Notice (Section 8).
• False-positive reports: at most 12 months. Pre-match check links: public for 3 hours, deleted 7 days after they expire.
• PRO payment records: for as long as accounting and tax law requires.
• Cookies: see the Cookie Policy.

11. Security measures

AACGUARD uses technical and organizational measures intended to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, and unlawful processing.

These measures may include access controls, authentication protections, infrastructure security, logging, rate limiting, abuse monitoring, provider-level safeguards, and reasonable internal restrictions on who can access data.

No internet-based service can guarantee absolute security, but we aim to apply proportionate safeguards appropriate to the nature of the data and service.

12. Your GDPR rights

Subject to applicable law and any lawful limitations, individuals may have the right to:

• Request access to their personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of personal data in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests.
• Withdraw consent where processing relies on consent.
• Request data portability where applicable.
• Lodge a complaint with a competent supervisory authority.

13. How to exercise your rights

To exercise your privacy rights or ask questions about how AACGUARD processes personal data, please contact us at [email protected] or through the Contact page on the site.

We may need to verify your identity before responding to a request, especially where the request relates to account access, scan-related records, payment history, or sensitive security logs.

14. Complaints and supervisory authority

If you believe your personal data has been handled in a way that does not comply with applicable law, you may lodge a complaint with your local supervisory authority.

For Romania, the competent supervisory authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP) / Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal.

According to the authority’s published guidance, complaints may be submitted in writing in Romanian or English, including by post, email, registry filing, or by using the complaint procedure available on the authority’s website.

Supervisory authority website: https://www.dataprotection.ro

15. Children and minors

AACGUARD is not designed as a child-directed service. If minors use game servers or web features connected to AACGUARD, any related data handling is intended to remain limited to the operational, security, moderation, and service purposes described here.

16. Changes to this GDPR notice

We may update this GDPR notice from time to time to reflect changes in the service, legal requirements, vendor relationships, international transfer practices, or data handling operations.

When we do, we will update the “Last updated” date on this page.

17. Related documents and contact

For more information, please review our Terms of Use, Privacy Policy, and Cookies Policy.

Privacy-related questions and requests should be sent to [email protected] or submitted through the Contact page on this site.