R6 Locker ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.
Information We Collect
- Authentication Data: When you sign in with Discord, we receive your account ID, username, avatar, and email address from Discord.
- Ubisoft Account Data: When you add an R6 account, your Ubisoft credentials are used once to authenticate and retrieve your game data. We do not permanently store your Ubisoft password.
- Game Data: Your Rainbow Six Siege username, level, inventory items (weapon skins, operator outfits, charms), and related statistics.
- Usage Data: Profile views, page visits, and general analytics to improve the service.
- Technical Data: IP address, browser type, and device information for security, rate limiting, and abuse prevention.
How We Use Your Information
- To display and track your Rainbow Six Siege inventory and statistics
- To authenticate your identity and manage your dashboard
- To enforce rate limits and prevent abuse
- To improve and optimise the platform
Data Storage and Security
All data is stored on secure servers with encrypted connections (HTTPS). Passwords are never stored permanently. Session cookies are HttpOnly and Secure. We implement CSRF protection and rate limiting across all endpoints.
Third-Party Services
- Ubisoft: We interact with Ubisoft services to retrieve your game data. We are not affiliated with Ubisoft.
- Discord: Used for OAuth authentication. We receive your Discord ID, username, avatar, and email.
- Cloudflare: Used for CDN and DDoS protection. Cloudflare may process your IP address and request headers.
Your Rights
- View all data associated with your account through the dashboard
- Delete individual R6 accounts from your profile at any time
- Change your display username (subject to a 7-day cooldown)
- Request complete deletion of your account and all associated data
Data Retention
We retain your profile data and game statistics for as long as your account is active. When you delete an account from your dashboard, its data is permanently removed from our database. API call logs are retained for rate-limiting and abuse prevention purposes.