Privacy Policy
Last updated: September 1, 2026
Changes in this version: we have added information about technical logs generated by service providers, updated the game-library information following the removal of Xbox synchronisation, added the processing of points and levels, clarified retention periods and added the note on aggregated usage statistics.
1. Who is responsible for your data
Controller: Joan Víctor Grimalt Bals
Contact: deckforgehub@gmail.com
You can write to that address about anything concerning your data, or use our contact page.
2. What data we process and why
- Account
- Your email address and your password, which is stored encrypted and which we cannot read. They let you sign in to your account and allow us to contact you if there is a problem with the service. Legal basis: performance of the service you have requested.
- Your consoles
- The console models you tell us you own. They let us show you the configurations that match your hardware rather than those of other models. Legal basis: performance of the service you have requested.
- Your game library
- If you choose to synchronise your Steam account, RigTune may access the authorised information from your library through the relevant integration or API, for the purpose of showing relevant games within the application and helping you select configurations. Steam synchronisation is voluntary and you may revoke it at any time. Games from Epic Games, GOG and Xbox are added manually by the user and stored in association with their RigTune account to display the relevant configurations and organise their library within the application. RigTune does not automatically synchronise Epic Games, GOG or Xbox accounts and does not access their services to obtain this information.
- Acceptance of notices
- The date on which you accepted the notices shown before applying a configuration. This saves you seeing them again and lets us show that you were informed. Legal basis: compliance with a legal obligation and our legitimate interest in being able to demonstrate that we informed you properly.
- Community contributions
- When you confirm that a recipe works for you, suggest a change, report a connection problem, flag an incorrect figure or ask us to add a game, we store your contribution linked to your account. This helps us improve the catalog and lets us review who contributed what if something turns out to be wrong. Your name, your email address and your account identifiers are never shown alongside a published contribution. Legal basis: performance of the service and our legitimate interest in maintaining the quality of the catalog.
- Points, levels and participation
- If you voluntarily participate in RigTune, we will process information about your accepted contributions and may calculate points and a participation level associated with your account. Your level may be displayed on your profile. Points and levels are used solely as a symbolic recognition of participation, have no monetary value, cannot be redeemed and do not provide functional benefits. The legal basis is our legitimate interest in managing participation and maintaining community integrity.
- Data usage measurements
- If you send us a network data usage measurement, we store the figure and the conditions under which you obtained it, together with an internal identifier for your account. We only publish the measurement if you expressly authorise it through a specific checkbox, and always without showing your identity. Legal basis: your consent for publication, and our legitimate interest in keeping it temporarily so that we can moderate it and check its quality even if it is never published.
- Contact and complaints
- The name, email address and content of the message you send us. We use them to respond to you and to keep a record of the complaint. Legal basis: performance of the service and compliance with legal obligations.
- Use of automatic generation
- We record how many automatic generations each account carries out, in order to control the cost of the service and prevent abuse. Legal basis: our legitimate interest in the sustainability and security of the service.
- Technical connection and security data
- When you use RigTune, our service providers may generate and retain technical logs necessary for security, operation, abuse prevention and incident resolution. These logs may include your IP address, access date and time, requests made, technical session identifiers, basic browser or device information, response codes, and authentication or message-delivery records. RigTune does not use this information to create advertising profiles or to carry out individualised analytics. The legal basis is our legitimate interest in ensuring the security, availability and proper operation of the service, pursuant to Article 6(1)(f) of Regulation (EU) 2016/679, and, where processing is necessary to provide a functionality requested by you, Article 6(1)(b) of that Regulation.
3. What we do not do
We do not sell your data, and we do not share it with third parties for commercial purposes.
We do not display advertising, and we do not allow any advertiser to process your data.
We do not use analytics, tracking or advertising cookies. We only use the technical storage strictly needed to keep you signed in and to remember your language.
We do not make automated decisions that produce legal effects concerning you or similarly significantly affect you. The configurations we show are for guidance, and it is you who applies them.
We do not process special categories of data, and we do not ask you for any.
RigTune may produce aggregated and anonymous statistics about the use of certain features, such as Travel Mode and Auto-Tuning, without recording which user performed each use, without using additional cookies, and without sharing these data with third-party analytics tools.
4. Who else processes your data
Service providers acting on our behalf. We use technology providers that may process personal data on RigTune's behalf to provide hosting, database, authentication, security, email-delivery and application-operation services. These providers include Supabase, for database and authentication services; Lovable, for application hosting and operation; and Resend, for sending and logging communications sent from RigTune. These providers act on our instructions, apply security measures and may process data only for the contracted purposes. Some providers may retain technical access, security or delivery logs, as explained in this policy. We review each provider relationship and any international transfers that may occur in accordance with Regulation (EU) 2016/679.
Database and authentication data are hosted in the European Union (Ireland).
If you connect your Steam account, information from your library will be processed through the relevant integration or API and within the scope of the permissions you authorise. RigTune does not synchronise Xbox, Epic Games or GOG accounts. Games from those platforms are added to the application only when you enter them manually.
5. How long we keep your data
Your account data, for as long as you keep the account open. If you delete it, that data is deleted along with your consoles, your synchronised library and your store connections.
Community contributions may be kept anonymously even if you delete your account, because they form part of the catalog and no longer allow you to be identified.
Messages you send through the contact form are kept with the name and email address you provided, even if you delete your account, for as long as needed to show that the complaint was dealt with.
Data usage measurements. We will keep the identifying data linked to a measurement for as long as necessary to validate it, handle any issues and respond to any complaints. As a general rule, it will be deleted or anonymised within a maximum of 12 months from the publication or rejection of the measurement, unless there is an open issue, a legal obligation, or a need to bring or defend legal claims. Pseudonymised technical data may be kept for as long as the measurement remains published and for the period needed to audit it.
Measurements that are never published are kept for between 6 and 12 months so that we can moderate them, detect anomalous values and avoid duplicates, and are then deleted or anonymised.
Contact messages and complaints, for as long as needed to deal with them and to show that they were dealt with.
The record that you accepted the legal notices, for as long as you keep your account, because it is the evidence that we informed you before you applied a configuration.
Technical logs relating to access, authentication, security and message delivery will be retained by our providers for as long as necessary for operation, security and incident-resolution purposes, in accordance with their applicable settings and terms. As a general rule, these logs will be retained for a few days or for the strictly necessary period determined by the relevant service and plan. They may be retained for longer where necessary to investigate an incident, prevent abuse, comply with a legal obligation, or establish, exercise or defend legal claims.
Points and levels will be retained while your account remains active or until you request their deletion, unless they must be retained for longer to comply with a legal obligation or to establish, exercise or defend legal claims. When you delete your account, we will delete or anonymise the data associated with your points and level in accordance with this policy. Technical contributions may be retained in anonymised form and without being linked to your account where necessary to maintain the usefulness of the service.
6. Your rights
You may exercise the following rights at any time:
Access: to know what data of yours we process.
Rectification: to correct data that is inaccurate.
Erasure: to ask us to delete it.
Objection: to object to processing based on our legitimate interest.
Restriction: to ask us to keep your data but not use it while a disagreement is resolved.
Portability: to receive your data in a machine-readable format.
Withdrawal of consent at any time, where the processing is based on it. Withdrawing it does not affect the lawfulness of processing carried out beforehand.
You may request access to, rectification or deletion of data relating to your points, level and participation, and may object to or request restriction of certain processing activities, in accordance with applicable law.
To exercise them, write to us from the contact page stating which right you wish to exercise. We will reply within one month.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Minors
RigTune is not intended for children under 14. If we find that an account belongs to a child under that age without the consent of whoever holds parental responsibility or guardianship, we will delete it.
8. Security
We apply technical measures to protect your data, including encryption of communications, row-level access control in the database and encryption of passwords. No system is completely secure; if a breach were to affect your data and pose a risk to you, we will inform you.
9. Changes to this policy
If we change this policy, we will update the date in the header. Where the change substantially affects your rights or the purpose of the processing, we will notify you within the application before it takes effect.
RigTune PRO waiting list
If you select "Notify me when PRO launches", we will record your inclusion in the waiting list using your account identifier and the date on which you joined. If appropriate, we will use the email address associated with your account at the time of sending to send you one email containing information about the launch of RigTune PRO, if it is eventually launched.
The legal basis is your express request to receive that notification, pursuant to Article 6(1)(a) of Regulation (EU) 2016/679. The processing is limited to this purpose and does not subscribe you to general marketing communications. We will keep your registration until you withdraw your request, delete your account, or the launch notification is sent. If PRO is not launched, we will delete the registration when there is no longer a reasonable prospect of launch and, in any event, review it periodically.
You may leave the waiting list at any time using the same button used to join it. Deleting your account will also remove your registration. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. For more information about the processing of your data and your rights, please consult this Privacy Policy or contact deckforgehub@gmail.com.