Persian Gulf privacy policy
Draft, 17 Mehr 1405.
Our rule: we only collect what the service needs. Data that isn't collected can't leak.
1. What we collect
| Data | What for | How it's kept |
|---|---|---|
| Steam ID, public Steam name and avatar | Account and profile | Normal |
| Phone number | Sign-in, purchases, important texts | Encrypted; support staff see it partly hidden |
| Name (optional) | Support | Normal |
| Game stats (kills, deaths, maps…) | Ranks, profile, stats | Normal |
| Clan (name, tag and members) | Shown on the profile and the clan page | Public: anyone sees a clan's members, even if your profile is private |
| IP address | Security, abuse prevention, per-ISP ping (averages only) | Logs are deleted after 30 days |
| Anti-cheat result (clean/not clean + reason code) | Letting you into servers | Separately, restricted access |
| Hardware ID | Stopping ban evasion | As a one-way hash only; can't be turned back into a real serial number |
| Payment records (Bale reference, amount, date) | Order tracking and support | Normal |
| Support tickets | Support | Normal |
| Site visit statistics | Improving the site | On our own server, no outside service |
Computer ban: if an admin bans someone for proven cheating with the "also ban the computer" option, the hashed ID of the computers that account signed in from through the launcher is used to stop a new account being made on the same computer. The anti-cheat itself never bans anyone. When the ban is lifted, the computer is freed too.
2. What we never collect
Anti-cheat never sends: your program or file lists, screenshots, keystrokes, browser history or any personal file. Every check runs on your own system and only the result is sent.
To find cheats, the anti-cheat looks on your own PC at which programs are open and which ones are attached to the game, and compares them with a list of known cheats. If it finds one it closes it on the spot. The names of programs are never stored or sent anywhere; only a short code goes out (like "a cheat program was open"). For fake input it only counts how many mouse or keyboard events were made by a program, never which key was pressed or where the mouse was.
3. Sharing
Your data is never sold or given to any person or company. The only exceptions: texts sent through the SMS service, payments through Bale, and lawful requests from the authorities.
4. Where it's kept
On our own servers in Iran, with encrypted backups.
5. Security
Encrypted connections (HTTPS), encryption of sensitive data, two-step sign-in for admins, the least access each part needs, and a log of support staff viewing sensitive data. Launcher updates are signed with a key that is never kept on any server.
6. Your rights
- Seeing and editing your account data, and getting a copy of your data
- Deleting your account: personal data is erased; only payment and ban records (anonymised or hashed) are kept, against fraud and for accounting
- Making your profile private
- Choosing which texts and notifications you get
7. Contact
through support on the site.