1. Introduction

OG Esports A/S ("OG Esports," "we," "us," or "our"), a company registered in Denmark, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit ogs.gg (the "Site").

As a Danish entity, we comply with the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven). Our supervisory authority is the Danish Data Protection Agency (Datatilsynet).

2. Data Controller

OG Esports A/S
Denmark
Email: privacy@ogs.gg

3. What Data We Collect

3.1 Data You Provide Directly

  • Account Information: If you create an account, we collect your email address, display name, and any profile information you choose to provide.
  • Communications: When you contact us, we collect the content of your message and your contact details.

3.2 Data Collected Automatically

  • Usage Data: Pages visited, time on site, click patterns, and navigation paths.
  • Device Data: Browser type, operating system, screen resolution, and device identifiers.
  • Location Data: Country and region derived from your IP address (we do not collect precise geolocation).
  • Cookie Data: See Section 8 (Cookies) below.

3.3 Data from Third-Party Services

  • Authentication (Auth0): If you sign in, we receive basic profile information from your identity provider (e.g., Google, Discord).
  • Analytics: We use analytics services that may process pseudonymized usage data.
  • FanFest SDK: If you participate in community features, we process engagement data through our fan engagement platform.

4. How We Use Your Data

We process your personal data for the following purposes:

  • Providing and operating the Site (legitimate interest)
  • Account management and authentication (contract performance)
  • Personalizing your experience (legitimate interest)
  • Analytics and Site improvement (legitimate interest)
  • Marketing communications, if you opt in (consent)
  • Compliance with legal obligations (legal obligation)
  • Geolocation for shop region routing (legitimate interest)

5. How We Share Your Data

We do not sell your personal data. We may share your data with:

  • Service Providers: Hosting (Vercel), authentication (Auth0), analytics, and content delivery services that process data on our behalf under data processing agreements.
  • Partners: Only aggregated, non-identifying data may be shared with sponsors or partners for reporting purposes.
  • Legal Requirements: When required by law, court order, or to protect our rights.

International Transfers

Some of our service providers are located outside the EEA. We ensure appropriate safeguards are in place (e.g., EU Standard Contractual Clauses) for any transfers of personal data outside the EEA.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

  • Account data: Retained while your account is active, plus 12 months after deletion.
  • Analytics data: Retained in pseudonymized form for up to 26 months.
  • Cookie consent preferences: Retained for 2 years.
  • Communication records: Retained for up to 3 years.

7. Your Rights

Under the GDPR, you have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Request correction of inaccurate data.
  • Erasure: Request deletion of your data ("right to be forgotten").
  • Restriction: Request that we limit processing of your data.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@ogs.gg. We will respond within 30 days.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

8. Cookies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the Site. We use cookies and similar technologies (localStorage, session storage) for site functionality, analytics, preferences, and community features.

8.2 Managing Cookies

When you first visit the Site, we present a cookie consent banner. You can accept all cookies, decline non-essential cookies, or manage your preferences at any time. You can also control cookies through your browser settings. Note that disabling strictly necessary cookies may impair Site functionality.

8.3 Specific Technologies

  • og-cookie-consent: Stores your cookie consent choice (2-year expiry).
  • og_region: Stores your geographic region for shop routing (session cookie).
  • Auth0 session tokens: Used for authentication when signed in.
  • FanFest localStorage: Stores engagement data for community features.

9. Children's Privacy

The Site is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

10. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), secure hosting infrastructure, and access controls. However, no method of transmission over the internet is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Site. The "Last Updated" date at the top indicates when the policy was last revised.

12. Contact Us

For questions about this Privacy Policy or to exercise your data rights:

OG Esports A/S — Data Protection
Email: privacy@ogs.gg
Website: ogs.gg

For complaints, you may also contact:

Datatilsynet (Danish Data Protection Agency)
Website: datatilsynet.dk