Privacy Policy

1. Who is responsible

3044 Pleasant LLC is the data controller for personal data processed through pesteck.com. Questions, requests and complaints about privacy go to [email protected], which is monitored by the people who can act on them.

2. What we collect

We collect the minimum needed to give you an account and run the service. That is:

• Account identifier — the email address or mobile number you registered with. Needed so you can prove the account is yours.
• Password verifier — a scrypt hash of your password with a random salt. We never store the password itself and cannot recover it.
• Display name — the name shown to other players, which you choose.
• Country — selected at registration. Determines your dial code and which regional catalogue applies to you.
• Consent record — whether and when you accepted these documents, and whether you opted in to product messages. We are required to be able to evidence consent.
• Session data — a random session token stored in a cookie and in our database, with its creation and expiry times.
• Server logs — request metadata including IP address, kept transiently to operate the service and to rate-limit sign-in attempts.

3. What we do not collect

We think the absence of processing is as material as its presence, so we state it explicitly.

• No third-party analytics. This site loads no analytics script.
• No advertising or cross-site tracking cookies, and no advertising identifiers.
• No marketing profile, behavioural segment or inferred-interest record.
• No sale or sharing of personal data with data brokers, under any label.
• No biometric, precise-location, or special-category data.

4. Why we process it, and on what basis

• To provide your account and the platform — performance of our contract with you.
• To keep the service secure, including rate-limiting sign-in attempts and investigating abuse — our legitimate interest in protecting the platform and its users.
• To send product messages where you ticked the optional box — your consent, which you may withdraw at any time.
• To meet legal obligations such as tax and accounting records — legal obligation.

5. Cookies

We set one cookie. It holds a random session token, is marked HttpOnly and SameSite=Lax, is served over HTTPS only in production, and exists so that you stay signed in.

It is strictly necessary for a service you asked for, which is why you are not shown a consent banner for it. Removing it signs you out and nothing else. There are no other cookies, and no third party sets a cookie through this site.

6. Who we share it with

We do not sell personal data and we do not share it for anyone else's marketing.

We share it only with infrastructure providers that host and deliver the service, under contracts that limit them to acting on our instructions; and where we are legally required to, in response to a valid, specific legal request, which we assess rather than accept automatically.

7. Where it is processed

The platform runs on servers in the regions listed on the site, and account data may be processed in any of them to deliver the service to you.

Where that involves a transfer out of your own jurisdiction, we rely on the transfer mechanisms available to us under applicable law, including standard contractual clauses where relevant.

8. How long we keep it

We keep account data while your account is open. After closure we delete the account record within 30 days, other than records we are legally required to retain — principally transaction records, which we keep for as long as tax law requires.

Inactive accounts with no sign-in for 24 months are notified at their registered contact detail and closed if there is no response. Session rows are deleted once expired. Server logs are retained transiently for operational and security purposes.

9. Your rights

Depending on where you live you may have some or all of the following rights. We honour them for everyone regardless of jurisdiction, because operating two standards would be worse than operating one.

• Access — ask what we hold about you and receive a copy.
• Rectification — have inaccurate details corrected.
• Erasure — have your account and its data deleted.
• Portability — receive your data in a machine-readable form.
• Objection and restriction — object to processing based on legitimate interests, or ask us to restrict it.
• Withdraw consent — turn off product messages at any time, without affecting your account.
• Complain — raise a complaint with your local data protection authority.

10. How to exercise them

Write to [email protected] from the email address or mobile number registered to the account. We reply within 30 days, and we do not charge for a request.

We verify that a request comes from the account holder before acting on it. That verification is the only reason we would ask you for anything beyond what is listed above.

11. Children

The platform is not directed at children. You must be 18 or over to hold an account. If we learn that we hold data about someone under that age we delete it. If you believe a child has registered, tell us at [email protected] and we will act on it.

12. Security

Passwords are stored as salted scrypt hashes. Sessions use random tokens in HttpOnly cookies. Authentication endpoints are rate-limited and reject requests that did not originate from this site. Traffic is served over TLS.

No system is perfectly secure. If a breach affects your personal data and presents a risk to you, we will tell you and the relevant authority within the time limits the law sets.

13. Changes to this policy

If we change how we handle personal data we will update this page and change the effective date above. Where a change materially affects you we will tell you before it takes effect rather than after.

14. Contact

3044 Pleasant LLC, operator of PES Game Platform. Privacy contact: [email protected].