Collect only what is needed for the feature, security or legal obligation.
LEGAL / GDPR / COOKIESYOUR DATA.
YOUR DATA.
YOUR CONTROL.
This notice explains, in plain language, how Hooligans HNS uses personal data across the website, CS2 server, Ranked, VIP, Hooligans Coins, support and connected services.
No advertising pixels, behavioural profiles or analytics cookies are installed.
Identity-aware requests are verified through the signed Steam session.
Sensitive admin actions are permission-gated and written to an audit log.
WHAT WE USE
AND WHY.
SteamID64 and public profile data are personal data when they identify a player. Each activity below has a defined purpose, legal basis and retention rule.
ACTIVITYDATALEGAL BASISRETENTION
SteamID64, public Steam name, avatar, signed session and sign-in security state.
Service agreement and legitimate interests in secure authentication.
OAuth state: 10 minutes. Signed session: up to 14 days. Public profile cache: short-lived.
SteamID64, display name, avatar URL, region, map, playtime, kills, assists, deaths, jumps, RP, division, event history and season results.
Service agreement and legitimate interests in operating a fair, abuse-resistant competition.
Detailed events are retained for the active season and the documented integrity/appeal period. Final season results may remain as community history, subject to applicable rights.
Purchaser and recipient SteamID64, public profile data, email, payment method, amount, currency, provider references, VIP status, HC ledger, fixed-price shop reservations and delivery status.
Contract, steps before a contract, legitimate interests in fraud prevention, and legal obligations for accounting and disputes.
Pending records are removed when no longer needed. Completed transaction, coin-ledger and accounting records follow operational and mandatory statutory retention periods.
SteamID64, selected loadout, entitlements, trade-offer reference and delivery status. Hooligans never requests a Steam password or stores full card details.
Service agreement and legitimate interests in secure delivery and fraud prevention.
While the entitlement or delivery record is needed, followed by a limited dispute and fraud-prevention period.
Pseudonymous IP-derived rate-limit key, signed server-event IDs, admin actions, integrity flags, bans and support evidence.
Legitimate interests in network security, fraud prevention, community safety and legal claims.
Rate-limit records are normally removed after two days. Other records are kept only for the applicable security, appeal or legal-claim period.
Your choice to permit external video plus data sent by your browser to YouTube when you load an embed.
Consent. External media is blocked by default and can be disabled again at any time.
The Hooligans preference stays on your device until you change it or clear browser storage. YouTube controls its own processing after loading.
WHO MAY
PROCESS DATA.
Application hosting, database, media delivery, TLS and network protection.
Steam OpenID, public profile lookup, trades and CS2 account identity.
Checkout, payment confirmation, fraud controls and receipts. Providers receive only the data needed for their role.
Discord is used when you choose support. YouTube receives a request only after optional external media is allowed and loaded.
Some providers may process data outside the EEA. Hooligans must document the applicable transfer mechanism, such as an adequacy decision or approved contractual safeguards, and make further information available on request. Provider access is limited to the service purpose and governed by the applicable agreement.
ASK. CORRECT.
DELETE.
Requests are free. Hooligans normally responds within one month and may verify the request through the linked Steam account before releasing or changing account data.
Receive confirmation and a copy of personal data connected to you.
Correct inaccurate or incomplete account or transaction information.
Delete eligible data when it is no longer needed. Legal, fraud, ban and accounting exceptions may apply.
Ask Hooligans to limit processing while a dispute or accuracy check is handled.
Receive applicable data in a structured, machine-readable format where the right applies.
Object to processing based on legitimate interests, including public profile display, based on your situation.
Block optional external media at any time through Privacy Choices in the footer.
Request staff review of integrity flags, rank actions or reward holds. RP calculations do not make legal or similarly significant decisions.
SUBMIT A VERIFIED REQUESTprivacy@hooliganshns.se
START REQUEST ↗Include your SteamID64 and the right you want to exercise. Never send a Steam password, authenticator code, full payment credential or sensitive identity document through Discord.
PROTECTION IS
AN OPERATING SYSTEM.
Signed server events, HttpOnly sessions, same-origin write checks, rate limits, role permissions, audit logs and secret separation reduce unauthorised access and false game events.
Hooligans maintains an incident process to contain, document and assess personal-data breaches. Reportable incidents must be notified to the competent authority within the applicable deadline.
You may contact Sweden's supervisory authority, Integritetsskyddsmyndigheten (IMY), if you believe your data-protection rights have been infringed.
CONTACT IMY ↗Material changes are dated and explained here before new processing begins. A new purpose or optional technology receives its own legal-basis and consent review.