Privacy Policy

Who we are

ROSTERA is an independent information website about competitive Fortnite. The data controller is Rostera (Germany). Privacy questions: not specified. Postal address: not specified.

In short

• We do not sell personal data or share it for advertising.
• We count visits without cookies, and IP addresses are not stored in our statistics.
• A site account means signing in with Epic Games: we receive only your Epic ID and display name, never your email or password.
• You can delete your account at any time on the Account page, at once and for good.

What data we process

When you simply visit the site:

• visit statistics: the page you open, where you came from, your country (looked up from the IP address in an offline database; the address itself is not stored in statistics), browser, system and device type, page load speed, searches on the site;
• to tell visitors apart without cookies, we compute a hash of the IP address, browser and a random daily "salt"; the salt changes every day and is deleted after a day, so the hash cannot be linked to a person;
• to protect the site from abuse, a truncated IP address (without its last part) for no more than 30 days;
• error reports from pages: page address, error text, browser type;
• technical server logs (IP address, time, page address), only to run and protect the site, for no more than 30 days.

When you sign in:

• your Epic ID and display name from your Epic Games account, when the account was created and last used;
• a sign-in cookie for 30 days. You enter your password only on the Epic Games website; we never see it, and we do not receive your email.

Public data about Fortnite players. In Tracker and Pro scene we show what players and tournament organizers have made public: display name, Epic ID, stats, tournament results and prize money. For professional players we also show information from open encyclopedias (real name, country, team, date of birth), game settings and gear.

• Sources: Epic Games data via Fortnite stats services, open encyclopedias (Liquipedia and the Fortnite Wiki under CC BY-SA), open websites about prize money and player settings.
• Legal basis: legitimate interest in esports statistics and history.
• If this is your data and you want your profile hidden or corrected, write to not specified. You can also hide your stats in your Epic Games privacy settings, and then we no longer show them.

In your browser only (never sent to the server): favorite players, the comparison list, map drawings and similar settings. You can remove them by clearing the site data in your browser.

Why and on what legal basis

• running the site and your account: performance of a contract (the terms of use), GDPR Art. 6(1)(b);
• visit statistics, abuse protection and fixing errors: legitimate interest, GDPR Art. 6(1)(f);
• showing public player data: legitimate interest, GDPR Art. 6(1)(f);
• complying with the law: GDPR Art. 6(1)(c).

We make no automated decisions with legal effects for you and build no advertising profiles.

How long we keep data

• your account: until you delete it; after deletion the data is erased at once, and from backups as they are replaced, within 6 months;
• visit statistics: up to 400 days; page speed: up to 90 days;
• truncated IP addresses and technical logs: up to 30 days;
• error reports: up to 90 days.

Who receives data

• the hosting provider whose server runs the site: Poland;
• Epic Games, Inc. (USA), when you sign in with Epic: you go to their website, and they process data under their own privacy policy;
• a content delivery and attack protection service, if connected (for example, Cloudflare);
• authorities, only when required by law.

We do not sell personal data or share it for advertising, including as defined by US laws (CCPA/CPRA).

International transfers

Data is stored on the hosting provider's server named above. If data is transferred outside the EU (for example, to Epic Games in the USA), this happens on a lawful basis: an adequacy decision or standard contractual clauses.

Your rights

• to know what data we have about you and get a copy;
• to correct inaccurate data;
• to have your data deleted;
• to restrict or object to processing, including the display of a public profile;
• to receive your data in a machine-readable format;
• to withdraw consent where processing is based on it;
• to complain to the data protection authority of your country.

To use your rights, write to not specified. We reply within one month and may ask you to confirm the account is yours, for example by signing in with Epic Games.

Residents of different countries

• EU, EEA, UK and Switzerland: the rights listed above apply (GDPR, UK GDPR, the Swiss Federal Act on Data Protection).
• USA (California and other states with privacy laws): the right to know what data was collected, to delete and to correct it. We do not sell or share data for cross-context behavioral advertising. You will not be discriminated against for using your rights.
• Brazil (LGPD), Canada (PIPEDA), Russia (152-FZ) and other countries: the rights to access, correction and deletion apply in the same way. Requests go to not specified.

Children

The site is not intended for children under 13. If you are under 16 (or the age at which you can consent to data processing yourself in your country), sign in only with your parents' permission. If a child gave us data without that permission, write to us and we will delete it.

Cookies

See the Cookies page for the cookies we use.

Changes

We may update this policy. The date of the current version is shown at the top of the page. We will announce significant changes on the site.