PRIVACY POLICY

1.Terms

1.1. Personal data — information recorded on an electronic, paper and/or other tangible medium that relates to an identified natural person or makes it possible to identify them.

1.2. Data subject (User) — the natural person to whom the personal data relates.

1.3. Operator (Owner) — the person who processes personal data and determines the purposes and content of the processing — NOSCOPE-STATS LLC.

1.4. Processing — one or more actions involving the collection, systematisation, storage, modification, supplementation, use, provision, dissemination, transfer, anonymisation and destruction of personal data.

1.5. Third party — any person other than the Operator and the User.

1.6. Game Account — the User's account in third-party game services (Steam, Riot Games, Valve, Epic Games and others) that the User connects to the Platform in order to obtain statistics.

1.7. Cookies — small text files stored by a website on the User's device and used to recognise the User, save settings and analyse the operation of the Platform.

1.8. Other terms used in the Policy have the meaning given to them in the Public Offer and the legislation of the Republic of Uzbekistan.

2.Information about the Operator

2.1. Personal data operator: NOSCOPE-STATS Limited Liability Company, TIN 313324277, registered address: Republic of Uzbekistan, Fergana Region, Oltiariq District, Kapchug'ay.

2.2. Contact for personal data matters: e-mail ____________________@noscope.gg, phone +998 33 700 21 01.

2.3. The Operator registers its personal data databases in the State Register of Personal Data Databases of the Republic of Uzbekistan in the cases and manner prescribed by law.

3.Data We Process

3.1. Registration and Account data: e-mail address, phone number (if provided), username (nickname), password (in hashed form), avatar and, when signing in through a third-party authentication service (Steam, Google, Discord, etc.), the identifier and public profile data provided by that service.

3.2. Game Account data: Game Account identifier (Steam ID, Riot ID, etc.), in-game nickname, public profile data, match history and statistics, performance metrics, rank and level, information on in-game items used — obtained through the official API of the relevant game service in accordance with its terms of use. The Operator never requests or stores the Game Account password.

3.3. User Content: content created or posted by the User on the Platform — video clips generated from in-game moments, comments, profile description and other materials.

3.4. Payment data: date and amount of payment, selected tariff, payment system identifier (transaction/receipt number), payment status, masked part of the bank card number (last 4 digits) and the name of the payment system. The full card number, expiry date and CVV/CVC code are not received or stored by the Operator — they are processed exclusively by the licensed Payment Service (the PAYLOV payment service).

3.5. Technical data: IP address, device type and model, operating system, browser type and version, screen resolution, language settings, time zone, date and time of access to the Platform, pages viewed, referrer, activity log on the Platform, cookies and similar identifiers.

3.6. Communication data: the User's requests to the support service, correspondence and responses.

3.7. The Operator does not collect or process special categories of personal data (racial or ethnic origin, political opinions, religious beliefs, health status, etc.) or biometric data. If the User voluntarily posts such data in User Content, they do so at their own responsibility.

4.Purposes and Legal Bases of Processing

4.1. The Operator processes personal data for the following purposes:

4.1.1. creating the Account, identifying and authenticating the User, providing access to the Account — on the basis of performance of the agreement under the Public Offer;

4.1.2. providing the Services: obtaining statistics from the Game Account, processing, analysing and visualising them, generating reports and recommendations, creating video clips — on the basis of performance of the agreement;

4.1.3. accepting payments for Paid Services, managing subscriptions, sending receipts and payment confirmations, maintaining accounting and tax records — on the basis of performance of the agreement and legal requirements;

4.1.4. responding to User requests, providing technical support, handling claims — on the basis of performance of the agreement;

4.1.5. ensuring the security of the Platform, detecting and preventing fraud, unauthorised access, bots and violations of the Offer — on the basis of the Operator's legitimate interests;

4.1.6. improving the Platform, analysing usage statistics, identifying errors, developing new features — in anonymised or aggregated form, on the basis of the Operator's legitimate interests;

4.1.7. sending marketing messages about the Platform, services and promotions — on the basis of the User's separate consent (which may be withdrawn at any time);

4.1.8. complying with legal requirements and responding to lawful requests of authorised state bodies — on the basis of law.

4.2. The Operator does not process personal data for purposes not specified in the Policy. If a new purpose arises, the Operator amends the Policy and, where necessary, obtains additional consent from the User.

4.3. The Operator does not make decisions producing legal effects for the User solely on the basis of automated processing. Statistical analysis and recommendations on the Platform are for information purposes only.

5.Consent and Its Withdrawal

5.1. The User gives consent to the processing of personal data by ticking the relevant box during registration on the Platform, connecting a Game Account or accepting the Public Offer. Consent is given in electronic form and, in accordance with the law, is equivalent to written consent.

5.2. Consent to marketing messages is requested separately and may be withdrawn at any time in the Account settings or via the "unsubscribe" link in each message.

5.3. The User may withdraw consent at any time by sending a request to the e-mail address specified in clause 2.2. The Operator acts on the request within 10 (ten) business days. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5.4. If withdrawal of consent makes it impossible to provide the Services, the Operator deletes the Account and notifies the User. Data for which the law prescribes a retention period (payment documents, etc.) is retained until that period expires.

6.Disclosure to Third Parties

6.1. The Operator does not sell personal data and does not disclose it to third parties for advertising purposes.

6.2. The Operator may disclose personal data, only to the extent necessary to provide the Services, to the following categories of recipients:

6.2.1. the Payment Service — OCTAGRAM JSC (the PAYLOV payment service) and PAYTECH LLC (the wlcm platform), as well as the payment systems operating through them (Uzcard, Humo, Payme, Click, Uzum Bank) — for payment processing;

6.2.2. hosting providers and cloud infrastructure services — for data storage and operation of the Platform;

6.2.3. e-mail and SMS delivery services — for delivering messages to the User;

6.2.4. analytics services — for analysing Platform usage statistics in anonymised or pseudonymised form;

6.2.5. game services (Steam, Riot Games, etc.) — when the User connects a Game Account, data is exchanged with them via API in accordance with their terms;

6.2.6. the Operator's technical contractors and consultants — under confidentiality obligations.

6.3. All such recipients act under agreements with the Operator and undertake to process data only for the purposes determined by the Operator and to keep it confidential.

6.4. The Operator provides personal data to authorised state bodies only on the grounds and in the manner established by the legislation of the Republic of Uzbekistan, upon an official request.

6.5. In the event of the Operator's reorganisation or transfer of the Platform to another person, personal data may be transferred to the legal successor; the User is notified and the terms of this Policy apply to the successor.

6.6. The User's nickname, avatar, public game statistics and video clips marked as public may be visible to other users of the Platform and, via a link, outside it. The User manages profile visibility settings in the Account.

7.Data Location and Cross-Border Transfer

7.1. Personal data of citizens of the Republic of Uzbekistan is collected, systematised and stored on technical means and in databases physically located in the territory of the Republic of Uzbekistan, in accordance with Article 27¹ of the Law "On Personal Data".

7.2. Cross-border transfer of personal data (for example, data exchange with the APIs of foreign game services or use of foreign technical contractors) is carried out only in compliance with the conditions established by law: where the state to which the data is transferred provides adequate protection of personal data, or where the User has given consent and the transfer is necessary for the performance of the agreement.

7.3. By connecting a Game Account, the User consents to data exchange with the relevant game service (regardless of the country in which it is located), since the Services cannot be provided without it.

8.Retention Periods

8.1. The Operator retains personal data for no longer than is necessary to achieve the purposes of processing:

8.1.1. Account and profile data — for the lifetime of the Account and up to 30 (thirty) days after its deletion (to allow restoration), after which it is deleted or anonymised;

8.1.2. game statistics and User Content — for the lifetime of the Account or until deleted by the User; after deletion of the Account — deleted or anonymised within 30 (thirty) days;

8.1.3. payment and accounting documents — for the period established by the tax and accounting legislation of the Republic of Uzbekistan (at least 5 (five) years);

8.1.4. technical logs and IP addresses — up to 12 (twelve) months; for security incidents — until the investigation is completed;

8.1.5. correspondence with the support service — up to 3 (three) years after the request is closed;

8.1.6. marketing consent — until withdrawn.

8.2. Upon expiry of the retention period, data is irreversibly destroyed or anonymised (rendered incapable of identifying the User). Anonymised statistical data may be retained indefinitely for the improvement of the Platform.

9.Data Protection

9.1. The Operator takes the necessary legal, organisational and technical measures to protect personal data from unauthorised or accidental access, destruction, modification, blocking, copying, dissemination and other unlawful actions, including:

9.1.1. encryption of data in transit (HTTPS/TLS) and storage of passwords in hashed form;

9.1.2. restricting access to data to employees who need it for their duties, and logging access;

9.1.3. processing of bank card data by the Payment Service — the Operator does not store card data on its servers;

9.1.4. regular backups, security updates and vulnerability monitoring;

9.1.5. confidentiality obligations with employees and contractors.

9.2. The User, for their part, must keep their Account password and credentials confidential, choose a strong password and not disclose it to third parties.

9.3. If a personal data breach or unauthorised access is detected, the Operator notifies the competent authority and the affected Users in the manner prescribed by law and takes measures to remedy the consequences.

10.User Rights

10.1. As a data subject, the User has the right to:

10.1.1. obtain information on whether the Operator processes their personal data, the purposes, methods and periods of processing, and the recipients of the data;

10.1.2. access their personal data and obtain a copy of it (via the data export function in the Account, where available);

10.1.3. request correction and updating of inaccurate, incomplete or outdated data;

10.1.4. request cessation of processing, blocking or destruction of data if it was obtained unlawfully or is not necessary for the purposes of processing;

10.1.5. withdraw consent (Section 5);

10.1.6. opt out of marketing messages;

10.1.7. delete the Account (clause 4.6 of the Public Offer);

10.1.8. apply to the authorised state body for personal data or to a court to protect their rights;

10.1.9. exercise other rights provided by law.

10.2. To exercise these rights, the User sends a request to the e-mail address specified in clause 2.2 from the e-mail address linked to the Account. The Operator may request additional information to verify the User's identity.

10.3. The Operator reviews the request within 10 (ten) business days of receipt and sends a response to the User. Where the law sets a different period, the statutory period applies.

11.Data of Minors

11.1. The Platform is intended for persons over 16 years of age. Persons aged 16 to 18 use the Platform with the consent of their legal representatives (parents or guardians); responsibility for the existence of such consent lies with the User and their legal representatives.

11.2. The Operator does not knowingly collect personal data of persons under 16. If the Operator becomes aware that such data has been collected, it will be deleted as soon as possible.

11.3. A parent or guardian who believes that their child's data is being processed on the Platform may contact the address specified in clause 2.2.

12.Cookies and Similar Technologies

12.1. The Platform uses the following types of cookies and similar technologies (localStorage, pixel tags):

12.1.1. essential — to maintain the Account login session, for security and for the core functions of the Platform (the Platform does not work without them);

12.1.2. functional — to remember language, theme, filters and other user settings;

12.1.3. analytical — to collect Platform usage statistics and improve the Platform (data is analysed in aggregated form).

12.2. The User may restrict or disable cookies in their browser settings. Disabling essential cookies may cause certain functions of the Platform, including Account login, to stop working.

12.3. Where third-party analytics services are used on the Platform, they may set their own cookies; the list of such services and links to their privacy policies are published on the Platform.

13.Third-Party Services and Links

13.1. The Platform is integrated with third-party services (game platforms, authentication services, payment systems, social networks) and may contain links to them. These services have their own privacy policies, and the Operator is not responsible for their data processing practices.

13.2. When signing in to the Platform through a third-party service or connecting a Game Account, the User is advised to read that service's privacy policy.

13.3. If the User shares a video clip created on the Platform on social networks, the rules of the relevant social network apply to such content.

14.Changes to the Policy

14.1. The Operator may unilaterally amend this Policy. A new version enters into force from the moment it is published on the Platform unless a different date is specified in it.

14.2. The Operator notifies Users of material changes concerning the purposes of processing, the scope of data or the procedure for disclosure to third parties via a notification on the Platform or by e-mail at least 10 (ten) calendar days in advance and, where necessary, requests renewed consent.

14.3. The current version of the Policy is permanently available at https://noscope.gg/privacy (or another address determined by the Operator). Each version indicates its number and date of entry into force.

15.Final Provisions

15.1. This Policy is governed by the legislation of the Republic of Uzbekistan. Disputes relating to the Policy are resolved in the manner set out in the Public Offer.

15.2. The Policy is drawn up in Uzbek, Russian and English. In the event of any discrepancy between the texts, the Uzbek text prevails.

15.3. Matters not regulated by the Policy are governed by the legislation of the Republic of Uzbekistan and the Public Offer.

16.Operator's Details and Contact Information