Privacy Policy

1. Who We Are

R6 Insights ("we", "us", "our") is an esports analytics platform for competitive Rainbow Six Siege teams, accessible at r6insights.org. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

R6 Insights is not affiliated with or endorsed by Ubisoft Entertainment. Rainbow Six Siege is a trademark of Ubisoft.

2. Information We Collect

Account information

• Email address (used for authentication and transactional emails)
• Display name and in-game username you choose at signup
• Subscription status and plan type
• Team membership and role (captain, player, coach, etc.)

Usage data

• Match replay files you upload (.rec format)
• Match statistics derived from those replays
• Coaching notes and VOD links you create within the Service
• Map veto and scouting data you enter

Technical data

• Browser type and general device information (via Cloudflare analytics)
• Pages visited and feature usage patterns (aggregated, not individually tracked)

Payment data

• Payment processing is handled entirely by Stripe. We do not store card numbers or full payment details. We receive only a transaction reference and your email address from Stripe.

3. How We Use Your Information

• To provide and operate the Service (auth, team management, analytics display)
• To deliver your subscription codes and transactional emails via Resend
• To process payments via Stripe
• To display your match statistics to you and your teammates
• To enforce our Terms of Service and prevent abuse
• To improve the Service based on aggregated usage patterns

We do not use your data for advertising, profiling, or any purpose unrelated to operating R6 Insights.

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the following service providers, strictly to operate the Service:

• Firebase (Google) — database and authentication hosting
• Cloudflare — website hosting, CDN, and Workers infrastructure
• Stripe — payment processing
• Resend — transactional email delivery

Each provider processes your data only as necessary for their role and under their own privacy policies. We do not share data with any advertising networks or data brokers.

Your match statistics are visible to your teammates within the platform. Public-facing features (LFT/LFP boards) only show data you explicitly opt into making public.

5. Replay Files & Match Data

Replay files (.rec) you upload are parsed locally in your browser using WebAssembly — the raw file is never transmitted to our servers. Only the derived statistical data (kills, deaths, operators, round outcomes, etc.) is stored in our database.

You retain ownership of the data you upload. We store it to provide the Service and will delete it upon account deletion.

6. Data Security

We implement reasonable technical measures to protect your data:

• All traffic is encrypted via HTTPS/TLS
• Database access is protected by Firebase Security Rules — each user can only access their own data and their team's data
• All database reads and writes are proxied through our Cloudflare Worker, keeping credentials server-side
• Passwords are managed entirely by Firebase Authentication — we never see or store them

No system is 100% secure. If you believe your account has been compromised, contact us immediately on Discord.

7. International Transfers

Our service providers (Google/Firebase, Cloudflare, Stripe, Resend) may process data in the United States and other countries. By using the Service, you consent to this transfer. Where required, our providers offer appropriate safeguards (Standard Contractual Clauses, etc.).

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us on Discord and we will delete it promptly.

9. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us via our Discord server. We will respond within 30 days. We may need to verify your identity before processing the request.

10. Cookies & Local Storage

We use browser localStorage and sessionStorage to store your theme preference, demo session state, and temporary authentication tokens. These are not third-party tracking cookies. We do not use advertising cookies or cross-site tracking.

Cloudflare may set cookies for security and performance purposes as part of its CDN and DDoS protection services.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify users via the platform or email. Continued use of the Service after changes constitutes acceptance.

12. Contact

For privacy-related questions, data requests, or to report a concern, contact us via our Discord server. We aim to respond to all privacy requests within 30 days.