Privacy Policy

1. Who we are

StatsGoblin ("the Service") is a market-intelligence dashboard for game-server owners, operated by Rayon Games, MB ("we", "us", "our"), a company registered in Lithuania (rayon.lt). This Privacy Policy explains what personal data we process when you use the Service, why we process it, and what rights you have in relation to it. Questions about this policy, and any requests concerning your personal data, can be sent to us through the contact page.

2. What we collect

We collect only the data the Service needs to operate:

• Account details received from your sign-in provider (Google or Discord): your email address, your name, your provider user ID, and your avatar URL;
• Choices you make in the product, such as your audience type and the selections you save in the dashboard;
• Billing status confirmed via Stripe; card numbers and other payment credentials are handled by Stripe and are never visible to us;
• Session records: the IP address and browser user-agent string of each sign-in, stored for security and abuse prevention;
• Contact-form submissions: your name, email address, and message, together with the client IP address and user-agent at submission time.

3. Cookies and local storage

The Service uses an HttpOnly session cookie to keep you signed in, together with a small number of browser local-storage entries that remember your dashboard preferences and the changes you make in the product. All of them are strictly necessary for the Service to function. We do not use analytics cookies, tracking cookies, or marketing cookies; any measurement the Service performs (such as signup-funnel attribution) relies on first-party records like URL parameters and server-side logs, not on cookies or third-party trackers.

4. Legal bases

Our processing relies on the following bases under Article 6 of the GDPR: Article 6(1)(b) (performance of a contract) for your account and the dashboard features you use; Article 6(1)(c) (compliance with a legal obligation) for billing; and Article 6(1)(f) (legitimate interests) for the operational data needed to run the Service securely and reliably — session records and access/audit logging (incoming IP, URL, timing) in particular.

5. Third parties

Google and Discord handle authentication when you sign in, and Stripe handles payments; each processes your data under its own privacy policy in the course of providing that service. We may also disclose data where required by law, regulation, or legal process, or to a successor entity in a merger, acquisition, or asset transfer. Because Google, Discord, and Stripe operate outside the EU/EEA, data you provide through them is transferred to their jurisdictions under those providers' standard safeguards. Beyond these providers, we do not sell or rent your data.

6. Retention

Account data — for example, your profile and selections — is retained for as long as your account remains active; closing the account or an erasure request under Section 7 deletes it. Sessions expire after roughly 30 days of inactivity and are then removed. Contact-form submissions are kept while we handle your request and for our records thereafter, subject to the same erasure right. Billing records are retained for the period required by the legal duties that apply to them, and browser storage items persist until you sign out or clear your browser data.

7. Your rights

You may request access to your personal data, its rectification or erasure, data portability, and the restriction of its processing. You may object to processing, withdraw consent where, exceptionally, consent is the basis relied on, and lodge a complaint with a competent supervisory authority. Any of these rights can be exercised through the contact page, and we will respond within the timeframe the law requires.

8. Security

All traffic to the Service is protected with HTTPS. Authentication is delegated to Google or Discord, which means no password is ever stored by us. Your session lives in an HttpOnly first-party cookie, so it cannot be read by client-side scripts.

9. Children

The Service is not directed at persons under the age of 16, and we do not knowingly collect their data. If we learn that such data has been collected, we will delete it.

10. Changes to this policy

Material changes to this policy will be published on this page, identified by a new "Last updated" date. We will not reduce your rights under this policy without your consent, and the facts of what we collect and why will not change without being reflected here.