Privacy Policy
Effective date: 14 November 2026. We collect only the data the Platform needs to work; we do not sell it or use it for advertising. This policy follows the Law of the Republic of Azerbaijan “On Personal Data” and the EU General Data Protection Regulation (GDPR). This is a translation; if it differs from the Azerbaijani version, the Azerbaijani version prevails.
1. Who is responsible for your data
The operator (GDPR “controller”) of your personal data is the private individual who runs OyunRotor, Cavidan Alizada (Baku, Azerbaijan). For any question about your data, write via the contact page (oyunrotor.com/elaqe) or [email protected].
2. What data we collect
- Account data: email, name, username, an irreversible hash of your password (the password itself is never stored). If you sign in with Google or Discord, they send us your email, name, profile picture and account identifier.
- Profile data (public): profile picture, city, skills, links, bio, titles. You fill these in yourself and they are visible to the community.
- Content: game files, images, reviews, forum threads, comments, devlogs, team ads, applications, team chat messages, reports and messages sent through the contact form.
- Consent records: the date you accepted the Terms and the document version, your consent to the weekly digest email, your notification choices.
- Technical data: IP address and browser details for your active sessions (visible under Settings → Account), activity records used for security and spam limits.
- Statistics: views of the site and game pages, downloads and browser plays. Signed-in users are counted by account identifier; guests by a hash of IP address and browser mixed with a secret key that changes daily. The IP address itself is not stored and a guest cannot be recognised across days.
- Moderation records: reports, hidden content, bans and their reasons.
We do not ask for special-category data (health, religion, political opinions, etc.). We recommend not sharing such data in your public profile or content.
3. Purposes and legal bases
- Creating and running your account, storing and displaying your content, sending notifications: performance of our contract with you (the Terms of Service).
- Weekly digest email, optional profile data: your consent, which you can withdraw at any time in Settings.
- Security, spam and bot checks, fixing errors, moderation, aggregate statistics: legitimate interest in protecting the Platform and its users.
- Complying with lawful requests from authorities and defending legal claims: legal obligation.
We do not sell your data, build advertising profiles, or make automated decisions that have legal effects on you.
6. International transfers
Our server is in the European Union (France) and files and backups are stored on Cloudflare's network, so your data is stored outside Azerbaijan. Some providers (Cloudflare, Resend) operate in the USA; transfers to them rely on the safeguards required by the GDPR (for example the European Commission's standard contractual clauses).
By signing up you consent to your data being transferred to the countries listed in this section.
7. How long we keep data
- Account data: for as long as the account exists.
- If you delete your account: your email, name, profile data and picture, sign-in methods, sessions and notifications are deleted immediately. Reviews, threads, comments and games stay on the Platform, shown as by “Deleted user”. If you want those removed too, delete them yourself before deleting the account, or write to us.
- Encrypted backups: 30 days. Deleted data disappears from backups when this period ends.
- Sessions: at most 30 days. Verification codes: 10 minutes.
- Statistics records: for as long as the Platform operates, as aggregate counts; guest records are hashed and cannot identify a person.
- Moderation records: as long as needed for safety and resolving disputes.
8. Your rights
- To learn what data we hold about you and get a copy.
- To correct inaccurate data (you can change most of it yourself in Settings).
- To have your data deleted (you can delete your account yourself).
- To restrict processing or object to processing based on legitimate interest.
- To receive your data in a machine-readable format (portability).
- To withdraw consent at any time, without affecting the lawfulness of earlier processing.
- To complain to a competent authority (if you live in the EU, your country's data protection authority).
To exercise your rights, write via the contact page (oyunrotor.com/elaqe) or [email protected]. We reply within 30 days and may ask you to write from your account's email to confirm your identity.
9. Children
The Platform is not intended for anyone under 13 and we do not knowingly collect their data. Users aged 13 to 18 join with the consent of a parent or legal guardian. If we learn that someone under 13 has an account, we delete the account and its data. If you are a parent and know of such a case, contact us.
10. Security
All connections are encrypted with HTTPS, passwords are stored hashed, backups are encrypted and server access is restricted. No system is completely secure, but we take reasonable technical and organisational measures to protect your data. If a security incident affects your data, we will notify you and, where required, the competent authorities within the time the law requires.
11. Changes to this policy
We may update this policy. For significant changes (for example, collecting a new kind of data) we will give notice on the site or by email at least 14 days before they take effect. The policy is published in Azerbaijani and English; if they differ, the Azerbaijani text prevails.
12. Contact
Cavidan Alizada, Baku, Azerbaijan. Contact us via the contact page (oyunrotor.com/elaqe) or [email protected].