Legal

Privacy Policy

How we handle your data on beAlien.gg.

Last updated: May 2026

beAlien.gg is operated as a simracing setup shop. We only collect what is necessary to run the service. We do not sell your data, run advertising, or use tracking analytics.

1. Who We Are

beAlien.gg is the data controller for personal data processed through this website. You can reach us at:

[email protected]

2. What Data We Collect and Why

Login via Discord or Steam

We use OAuth — you log in through Discord or Steam, never directly with a password on our site. When you do, we receive and store:

  • Discord: your user ID, username, and avatar.
  • Steam: your Steam ID and public display name.

This is the minimum needed to identify your account. We do not receive your Discord or Steam password.

Legal basis: contract performance (GDPR Art. 6(1)(b))

Purchases

Payments are handled by Paddle, our Merchant of Record. Your credit card or payment details go directly to Paddle — we never see or store them. We receive from Paddle:

  • Order ID and what was purchased
  • Amount paid and your country (for VAT)
  • Subscription status

Legal basis: contract performance (GDPR Art. 6(1)(b))

Your Setup Library

We store which setup bundles you own or have claimed via subscription so we can show you your inventory and keep access working across devices.

Legal basis: contract performance (GDPR Art. 6(1)(b))

Server Logs

Our server records standard request metadata (IP address, browser, requested URL, timestamp) for security and error diagnosis. We do not use these logs for profiling or marketing.

Legal basis: legitimate interest (GDPR Art. 6(1)(f))

3. Cookies and Local Storage

We use exactly three things to keep you logged in and your cart intact:

  • access_token — an HttpOnly session cookie that keeps you logged in. It expires after 15 minutes and is automatically refreshed.
  • refresh_token — an HttpOnly cookie that silently renews your session without requiring you to log in again. Valid for 7 days.
  • Cart (localStorage) — your shopping cart is saved locally in your browser so it persists between page loads. It never leaves your device.

No tracking cookies. No advertising cookies. No Google Analytics or similar services.

4. Third-Party Services

We share data with these services only to the extent needed to run beAlien.gg:

Paddle

Payment processor & Merchant of Record

Handles all payment data. Responsible for EU VAT compliance on our behalf.

Their privacy policy →

Discord

Login provider

We receive only the profile data Discord passes to us during OAuth.

Their privacy policy →

Steam (Valve)

Login provider

We receive only your Steam ID and public display name.

Their privacy policy →

Cloudflare

Website hosting & delivery

Serves the website and may process request metadata transiently.

Their privacy policy →

5. Your Rights (GDPR)

If you are in the EU/EEA you have the right to access, correct, or delete the personal data we hold about you, as well as the right to object to certain processing or request a copy of your data. To exercise any of these rights, email us:

[email protected]

You can also lodge a complaint with your national data protection authority (e.g. the German BfDI).

6. Changes to This Policy

If we make significant changes we will update the "Last updated" date at the top of this page and post a notice on the website. Your continued use of beAlien.gg after changes are published means you accept the revised policy.