Privacy & Cookie Policy

This Privacy & Cookie Policy explains how Team Galaxy (“we”, “us”, or “our”) collects, uses, stores, and protects your information when you use our websites, services, and community platforms. We take privacy and security seriously and aim to handle your data lawfully, transparently, and with appropriate safeguards.

1. Who We Are (Data Controller)

Team Galaxy operates gaming and community-related services, including our website and connected user areas and community features. For the purposes of data protection laws, Team Galaxy is the data controller of the personal data collected through our Services.

If you have any questions about this Policy or how we process your data, you can contact us at:
Email: info@teamgalaxy.net

2. Information We Collect

We collect information to provide, protect, and improve our Services. The main categories of data are:

Data Category	Examples of Data Collected
2.1. Account Data	Information you provide when registering or updating your profile, such as username, display name, email address, avatar, and profile preferences.
2.2. Transaction & Order Data	Order details, purchase history, and limited payment-related metadata (for example, payment method type and transaction IDs). Actual payment details (such as full card numbers) are processed directly and securely by third-party payment providers; we do not store full card numbers on our own servers.
2.3. User-Generated Content (UGC)	Content you voluntarily post or upload, including community messages, chat content, comments, posts, feedback, and other contributions in our community features.
2.4. Technical & Usage Data	Device and connection information (browser type, operating system, device identifiers), IP address, general approximate location (e.g., city/country), log data, and usage patterns collected via analytics tools to help us understand and improve how our Services are used.
2.5. Communication Data	Messages and communications you send to us directly (for example, emails or contact requests), as well as metadata such as the time, date, and channel of communication.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create, manage, and maintain your account and profile.
• To provide, operate, and personalize our Services and community features.
• To process orders, provide purchased services, and deliver digital or physical goods (where applicable).
• To monitor, moderate, and keep our community safe (for example, detecting spam, abuse, or violations of our rules).
• To improve and optimize our Services, including debugging, analytics, and performance monitoring.
• To communicate with you about updates, changes, security alerts, or important notices regarding our Services.
• To respond to your questions and support requests.
• To comply with legal obligations and enforce our terms and policies.

4. Legal Bases for Processing (where applicable)

Where data protection law (such as the GDPR in the EEA/UK) applies, we rely on one or more of the following legal bases:

• Contract: Processing is necessary to provide the Services you request (e.g., account creation, order fulfillment, support).
• Legitimate Interests: Such as improving Services, preventing abuse, securing our systems, and running analytics in a privacy-respecting way.
• Consent: For certain optional features (for example, some cookies or communications), we rely on your consent, which you may withdraw at any time.
• Legal Obligation: To comply with applicable laws, regulations, and lawful requests by public authorities.

5. Cookies & Similar Technologies

Our website uses cookies and similar technologies to ensure basic functionality and to help us understand how users interact with our Services.

6. Third-Party Services & Data Processors

We work with trusted third-party service providers (data processors) who process personal data on our behalf and only according to our instructions. These currently include, for example:

• GitHub Pages – for hosting our website.
• Firebase (Google) – for backend infrastructure and certain application services.
• Supabase – for database and authentication or other backend services.
• Dropbox – as a content delivery and file storage solution for certain assets.
• Payment Providers – to securely process payments, where applicable.
• Analytics Tools – to help us understand usage trends and improve our Services.

These providers may process your data according to their own privacy policies in addition to ours. We take reasonable steps to work only with providers that implement appropriate data protection and security measures. We do not sell or rent your personal data to third parties.

7. Data Processing Location & International Transfers

Depending on your location and the location of our service providers, your data may be processed and stored in countries other than your country of residence, including in the European Union and the United States.

• Our hosting, backend, and infrastructure providers (such as GitHub, Google Firebase, Supabase, and Dropbox) may store and process data in their data centers in various regions.
• Where required by law, these providers may rely on legal mechanisms (for example, Standard Contractual Clauses or equivalent safeguards) to help protect personal data when it is transferred across borders.

By using our Services, you acknowledge that your information may be transferred and processed in these locations, subject to reasonable safeguards and protections. Nothing in this Policy is meant to reduce or limit any rights you may have under applicable data protection laws.

8. Data Retention

We retain personal data only for as long as reasonably necessary to:

• Provide and maintain our Services;
• Comply with legal, accounting, or reporting obligations;
• Resolve disputes and enforce our agreements.

When data is no longer needed for these purposes, we will either delete it or anonymize it so that it can no longer be linked to you, unless we are legally required to keep it for a longer period.

9. Your Rights

Depending on your country or region, you may have some or all of the following rights regarding your personal data:

• Access: Request confirmation of whether we process your personal data and receive a copy.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal or legitimate retention grounds.
• Restriction: Request that we temporarily or permanently stop processing all or some of your data.
• Portability: Request a copy of your data in a structured, commonly used, machine-readable format, where this right applies.
• Object: Object to certain types of processing, such as processing based on legitimate interests or for direct marketing.
• Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at info@teamgalaxy.net. We may need to verify your identity before fulfilling your request to help protect your data.

In some regions (such as the EEA/UK), you may also have the right to lodge a concern or complaint with your local data protection authority if you believe your rights have been violated. We encourage you to contact us first so we can try to resolve any concerns directly and promptly.

10. Data Security

We implement technical and organizational measures designed to protect your data against unauthorized access, loss, misuse, or alteration. These may include:

• Use of secure transport protocols (such as HTTPS) where appropriate.
• Access controls and authentication mechanisms to limit who can access personal data.
• Separation of duties between systems that process sensitive operations.
• Regular review of systems and services to detect and mitigate potential vulnerabilities.

However, no online service can guarantee absolute security. You are encouraged to keep your account credentials confidential and to contact us immediately if you suspect any unauthorized access to your account or data. We will take reasonable steps to investigate and, where necessary, mitigate any suspected incident.

11. Children’s Privacy

Our Services are not intentionally directed at children under the age where parental consent is required under local law, and we do not knowingly collect personal data from such children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information as soon as reasonably possible.

12. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will take reasonable steps to notify you (for example, by updating the “Last Updated” date at the top of this page or by providing a notice within the Services).

Your continued use of the Services after any update means that you have read and understood the updated Policy. Where required by law, we will seek your consent to material changes that affect how we use your personal data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Policy or your personal data, you can contact us at:

• Email: info@teamgalaxy.net

We will do our best to respond promptly and handle your request in a fair and reasonable way, in line with applicable data protection laws.