Privacy Policy

This Policy explains what personal data EloAdvisor ("we", "us") collects when you use eloadvisor.com, why, who it is shared with, and your rights. It follows the EU General Data Protection Regulation (GDPR). EloAdvisor, the operator of eloadvisor.com, is responsible for your data.

Account: email address, username, a hashed password (never the password itself) and your settings. If you sign in with Google or Discord, we receive your name, email address and profile picture from that provider.

Rank checker: the player name or ID and region you enter, and the public game statistics we read for that player, such as rank, record and most-played heroes or agents. We keep the latest numbers per player so the next check can show what changed.

Orders: the game, ranks, options and notes you enter, Offers, Order chat messages, proof screenshots, reviews and dispute details.

Game account details: after payment, the login or in-game tag the service needs. Stored encrypted, visible only to the Booster assigned to your Order, and deleted when the Order is completed or cancelled.

Payments: amount, method and status. Card payments are handled by Stripe; we never see or store your card number. For crypto payments we store the payment address, coin, amount and transaction ID.

Boosters: the booster application (Discord and Telegram name, country, experience, screenshots and answers), the public booster profile, payout wallet addresses, earnings and withdrawals.

Support: messages you send through the contact form or by email.

Technical data: your IP address, used briefly to limit abuse such as repeated sign-in attempts; error reports when something breaks; and the site that referred your first visit, kept in your browser and attached to your Order so we know which channels bring customers.

• to run your account and the rank checker (our contract with you);
• to take and deliver Orders, and handle payments, refunds, disputes and Booster payouts (contract);
• to send account and Order emails, such as email verification and password resets (contract);
• to prevent fraud, abuse and off-platform deals, and to keep the Website secure (legitimate interest);
• to keep payment and accounting records (legal obligation);
• to answer support requests (contract or legitimate interest).

We do not sell your data, use it for advertising, or make automated decisions about you that have legal effects.

Boosters: a Booster sees your Order and its chat, and once assigned, the details the service needs. Boosters see you only as "Customer", never your email address.

Service providers that process data for us under contract:

• Stripe (card payments) and CryptAPI (crypto payments);
• Vercel (hosting), our database provider, and Cloudflare (storage for uploaded screenshots and pictures);
• Resend (email delivery);
• Google reCAPTCHA (bot protection on sign-up, sign-in and the contact form);
• Sentry (error reports);
• Google and Discord, only if you choose to sign in with them.

Some of these providers are outside the EEA. Where they are, transfers are covered by the European Commission's standard contractual clauses or an adequacy decision.

Authorities: when the law requires it.

A buyer of the business: if EloAdvisor is sold or merged, your data may move to the new owner under this Policy. We will tell you first.

• game account details: deleted when the Order is completed or cancelled;
• Orders, chats, proof and disputes: as long as your account exists, so disputes and support can be handled;
• payment, refund and payout records: as long as accounting law requires, which can be several years after the account is deleted;
• IP addresses used for abuse limits: a few hours at most;
• rank checker numbers: until a new season starts for that player, or until you ask us to delete them;
• everything else: until you delete your account or ask us to.

Connections are encrypted, game account details are encrypted at rest, passwords are hashed, and admin access needs two-factor authentication. Messages containing contact details are blocked so that conversations stay on the Website. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

We use only the cookies the Website needs to work: keeping you signed in and protecting forms against cross-site request forgery. These don't need consent.

Google reCAPTCHA, which protects sign-up, sign-in and the contact form from bots, may set its own cookies and read information about your browser for that purpose.

Your browser also stores a few settings locally (not as cookies), such as notification sounds, your profile picture and the site that referred your first visit.

We use no advertising or tracking cookies. You can delete cookies in your browser settings; without the sign-in cookie you can't stay signed in.

If you are in the EEA or the UK, you have the right to:

• access a copy of the data we hold about you;
• correct data that is wrong;
• delete your data, except records we must keep by law;
• restrict or object to how we use it;
• get your data in a portable format;
• withdraw consent where we rely on it.

To use these rights, email [email protected] from the address on your account. We answer within one month. You can also complain to the data protection authority where you live.

The Website is not meant for anyone under 14, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

We may update this Policy. The new version is posted on this page with a new date, and we will tell you about important changes by email or on the Website.

For questions about this Policy or your data, contact [email protected].