Data Privacy & Protection

Privacy Policy

Effective Date: August 30, 2026 • Data Protection Governance for Run On Console (ROC)

1. Information We Collect

We collect minimal data required to provide a secure gaming hardware experience:

  • Account Credentials: Display name, unique username, email address, and cryptographically hashed passwords (Argon2id/bcrypt).
  • OAuth Profiles: When signing in with Google, we store your verified Google email and provider ID (sub). We never request or store your Google password.
  • Security Logs: IP addresses and user agents are logged in security tables to prevent brute-force attacks and rate-limit abuse.

2. How We Use Your Information

Your data is strictly used to authenticate your session, verify account ownership, deliver transactional email challenges (verification & password resets), and maintain custom PC spec wishlists. We never sell or rent personal data to third-party advertisers.

3. Cookies & Session Security

We use secure, server-side HTTP-only cookies with SameSite=Lax and Secure flags. Authentication tokens are never stored in browser localStorage or exposed to client-side scripts.

4. CAPTCHA Security Verification

We utilize Cloudflare Turnstile to protect signup forms against automated abuse. Turnstile evaluates security risks without relying on intrusive tracking cookies or personal data profiling.

Data Rights & Contact

You have the right to request access to or deletion of your personal account data at any time. Please email our Data Protection Officer at support@runonconsole.com.