Privacy & Cookies

Last updated: 2025-05-01

1. Data controller

The data controller is the operator of the bELO platform, reachable at support@flowverse.it.

2. Data collected

We collect the following personal data solely to provide the service:

• Email – required for registration and password recovery.
• Username – display name shown on the leaderboard and in matches.
• Match results – wins, losses, draws, and ELO score.
• Last-seen timestamp – date and time of last login, used only for application features (e.g. "recently active players").
• Match photos (optional) – voluntarily uploaded by the user, subject to moderation.

We do not collect location data, phone numbers, biometric data, or payment information.

3. Purposes and legal basis

Data is processed for the following purposes:

• Authentication and account management (legal basis: performance of a contract – Art. 6.1.b GDPR).
• Operation of the ELO leaderboard and match history (legal basis: performance of a contract).
• Sending transactional emails (e.g. password reset) – no marketing or commercial emails.
• Service security and abuse prevention.

Data is never shared with third parties or used for profiling or commercial purposes.

4. Cookies

This site uses only technical session cookies required for the application to function (authentication, language preference). No profiling cookies, third-party cookies, analytics cookies, or tracking pixels are used.

As these are strictly necessary cookies, no consent is required under Art. 5(3) of the ePrivacy Directive. The informational banner is shown for transparency.

Cookie	Type	Duration	Purpose
PHPSESSID	Session	Browser session	Authentication
belo_lang	Preference	30 days	Language preference
belo_cookie_ok	Preference	365 days	Informational banner already shown

5. Data retention

Account data is retained for as long as the account is active. Upon account deletion, the email address is anonymised and the password is cleared immediately; historical match results are kept in anonymised form to preserve the integrity of the historical leaderboard.

Password reset tokens expire after 1 hour and are periodically cleaned up.

6. Your rights

You have the right to access, rectify, erase, and port your personal data (Arts. 15–20 GDPR). You can:

• Review your data in the Profile section of the application.
• Delete your account and anonymise your data via the Delete account feature in settings.
• Request data export or full deletion by writing to support@flowverse.it.

You also have the right to lodge a complaint with your supervisory authority (in Italy: Garante per la protezione dei dati personali – garanteprivacy.it).

7. Contact

support@flowverse.it

8. Changes to this policy

This policy may be updated. The date of last update is shown at the top of this page. Continued use of the service after a change constitutes acceptance of the updated policy.