1. Data controller
The controller of personal data is PUBG URC, address: —, email for data-related requests: support@pubgurc.app.
This policy describes data processing when you use the website, the Windows application, and the PUBG URC server services.
2. Data we process
We follow the data minimisation principle and process only what the Service needs:
- account data: email address, name or nickname, password hash;
- contact details: your Telegram username, if you provided one;
- license data: the key in encrypted form and its hash, term, status, activation history;
- device data: an irreversible hardware fingerprint (HWID) hash, device label, application version, last activity time;
- technical data: IP address, request timestamps, session identifiers, security and error logs;
- website visit statistics: the page opened, date and time, the referring website, language, device and browser type, IP address. The statistics are kept on our own server, with no third-party service and nothing stored on your device;
- user content: profiles, configurations, calibrations, and settings backups;
- support requests: message text and attachments, conversation history;
- payment data: the fact, amount, currency, and method of payment. The Operator does not collect or store card details.
3. Purposes and legal bases
Processing is carried out for the following purposes and on the following bases:
- performance of the contract: providing access, profile synchronization, updates, and support;
- legitimate interests: protection against fraud and key compromise, device-limit enforcement, infrastructure stability and security;
- compliance with legal obligations: accounting and tax records, responses to lawful requests from authorities;
- consent: data you provide voluntarily, such as your Telegram contact. Consent may be withdrawn at any time.
4. Retention periods
Account and license data are kept for the term of access and then for three years to resolve possible disputes and meet record-keeping requirements.
The IP address in the visit statistics is kept for up to 90 days and then removed — the anonymised visit itself stays so that visitor counts do not change. Security and technical logs are kept for up to 12 months. Support correspondence is kept for up to 24 months. Settings backups are kept until you delete them or close your account.
After these periods data is deleted or anonymised. Data required to satisfy legal obligations is kept for the period prescribed by law.
5. Who receives the data
We do not sell personal data. Data may be shared only with the following categories of recipients and only to the extent necessary:
- infrastructure providers: hosting, content delivery, backup, monitoring;
- payment intermediaries and exchange services — to the extent needed to settle payments;
- Telegram — when you contact us through that channel, subject to its own policy;
- competent authorities — where there is a lawful and justified request.
6. International transfers
The Service infrastructure and its providers may be located outside your country of residence. In such cases transfers take place on a basis permitted by applicable law and with contractual safeguards in place.
7. Security
We use transport encryption, encrypted storage of license keys, irreversible hashing of hardware identifiers and passwords, short-lived session tokens, request rate limiting, and least-privilege staff access.
No system is perfectly secure. If a breach occurs that creates a high risk to your rights, we will notify you and the competent authority within the timeframes set by applicable law.
8. Your rights
In relation to your data you have the right to:
- obtain confirmation of processing and a copy of your data;
- request rectification of inaccurate data;
- request erasure where there is no basis for further processing;
- request restriction of processing or object to it;
- receive your data in a machine-readable format and transfer it to another controller where technically feasible;
- withdraw consent without affecting the lawfulness of processing before withdrawal;
- lodge a complaint with the competent data protection authority.
Send your request to support@pubgurc.app. We respond within 30 calendar days and may ask for information needed to verify your identity.
9. Cookies and local storage
Strictly necessary mechanisms always run and need no consent: session cookies that protect forms against request forgery, browser local storage for your chosen colour theme and language, and the record of your cookie decision.
The remaining categories — analytics and marketing — are off by default and run only after your explicit consent. The corresponding scripts are not executed before consent is given.
Your choice is stored together with its date and the notice version for up to 12 months, after which it is requested again. You can withdraw or change consent at any time through the “Cookie settings” link at the bottom of every page; refusing is as easy as accepting and does not restrict access to the site.
10. Minors
The Service is not intended for or directed at persons under 18. If we learn that a minor’s data was collected without a proper basis, it will be deleted.
11. Changes to this policy
A new version is published on this page with its date. We notify you of material changes through the application or by email at least 14 days before they take effect.
This version is effective from September 9, 2026.