SiegeIQ is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights. If you have questions, contact us at
privacy@siegeiq.gg
1. Information We Collect
Account information: When you sign up, we collect your email address and a password hash. We never store plain-text passwords.
Gameplay clips: When you upload a video clip for analysis, the file is stored securely in Cloudflare R2 encrypted cloud storage. Clips are used solely to generate your coaching report and are never shared, sold, or used to train AI models.
Match replays: If you use Verified Stats, the Siege match replay (.rec) files you upload are parsed into match statistics. We store the parsed statistics, not gameplay video, to generate your stat card and to power aggregate features like percentile rankings and match-integrity review.
Other players in your replays. A replay file describes everyone in that match — you and up to nine other players who did not upload anything and may not be SiegeIQ users. From you, the uploader, we take your Ubisoft profile ID, your in-game name, your in-match statistics, and your movement path and aim direction, which power your own coaching features. From the other players we take their Ubisoft profile ID, their in-game name as it appears in the match, and their in-match statistics. We use the name only to check public ban records and to recognise an account that has been renamed. We never show one player's name to another player, and we never publish it. We do not extract or use other players' movement or aim data.
We keep the replay file itself. When you upload a replay we store the original .rec file, not only the statistics we read out of it. That file is the game's own recording of the match and contains more than we currently read, including positional and aim information for everyone in the lobby. We keep it so that improvements to our parser can be applied to past matches without asking anyone to upload anything again, and because it is the evidence base for our match-integrity work. We do not extract, publish or act on positional or aim data about players other than the uploader, but we do hold the file that contains it, and we would rather say so plainly than let the sentence above imply otherwise.
Why we process this, and our legal basis. We process replay data to give you analysis of your own gameplay and to protect competitive integrity, for example recognising a returning account that changed its name. Our legal basis is legitimate interests (UK and EU GDPR Article 6(1)(f), and processing for reasonable purposes under Canada's PIPEDA). We have weighed this against the other players' privacy: their profile ID and their in-game name are both already visible to everyone who was in that match and to anyone using the game's own public profile lookup, the name is used only for integrity checks and is never displayed to another user or published, we hold no position or aim data about them, no automated decision or cheat verdict is ever made about them, and the data is deleted on a fixed schedule as set out in Data Retention below.
No automated cheat verdicts. We do not make automated decisions producing legal or similarly significant effects about any player. Gameplay, movement, and aim data are never used to automatically decide that someone is cheating and never trigger an automatic action against an account. Any integrity concern is reviewed by a person before anything happens, and we never show one user another player's integrity status.
Where this data comes from. Where we hold information about a player who did not upload a replay themselves, the source is a match replay uploaded by another player who was in the same match.
Competition data: If you enter a SiegeIQ competition, we collect your registration details, team and roster information, match results, and the replay files you submit for your competition matches. We may also collect integrity check-in materials such as third-party anti-cheat reports or screenshots where an event requires them. Your in-game name, team name, and match results are published on event pages and leaderboards. Where a prize is paid, we collect the identity and tax information needed to make and record that payment.
Linked clips: If you submit a YouTube or Twitch link, we store the URL for analysis and playback and do not download or store the video itself. If you import a Medal clip, we download that clip and store it in encrypted Cloudflare R2 storage so it can replay in your dashboard, the same as an uploaded file, and it is deleted on the same schedule (see Data Retention).
Coaching reports: Your analysis results, scores, and observations are stored in your account so you can access them later from your dashboard.
Payment information: Payments are processed by Stripe. SiegeIQ never sees, stores, or processes your card number, CVV, or billing address. Stripe handles all payment data under their own PCI-compliant systems.
Newsletter: If you subscribe to our newsletter, we store your email address to send coaching tips and product updates. You can unsubscribe at any time via the link in any email.
Voice calls with Cipher: If you start a call with Cipher, your microphone audio is streamed to our voice provider, ElevenLabs, while the call is live so it can be turned into text and answered in Cipher's voice. We do not record the audio of your calls, and we have set the service not to record it either. (The only calls ever recorded are SiegeIQ staff's own test calls.) To answer you, Cipher is given a summary of your own SiegeIQ data: your recent coaching reports, your focus habit, and statistics from replays you uploaded. A written transcript of the call is kept by ElevenLabs for 30 days and then deleted; we use it to write your call recap and, if you mark a call as wrong, to find and fix what Cipher got wrong. We keep the call's length, your recap and any rating you give in your account.
Voice questions and clip audio: When you ask Cipher a question by holding the microphone button, your browser's own speech recognition turns it into text (in Chrome and Edge that service is run by the browser maker); where your browser cannot do that, the audio is sent to ElevenLabs instead. When we read the voice comms in a clip you upload, the clip's audio is sent to ElevenLabs to be turned into text. Clip audio can include teammates speaking in voice chat. We store the text, not a separate copy of the audio.
Avatar Maker and your photo: The Avatar Maker can build a cartoon avatar from a selfie. This is optional and only for signed-in accounts, and you must confirm you are 18 or older, or that a parent agreed, before the photo is sent. Your photo is shrunk in your browser and sent once to our AI provider (currently Google's Gemini) to choose the avatar's settings, such as hair style, facial hair and colours. We do not store your photo or keep a copy in our logs, and we ask the AI not to guess your age, ethnicity or gender. If you would rather not send a photo, you can match colours by tapping on it instead, which never leaves your browser. If you choose to use your finished cartoon as your profile picture, we store that cartoon image and its settings with your account until you remove it or delete your account. It shows on your profile and on score cards you choose to share.
Usage data: We collect basic analytics including page visits, feature usage, and error logs to improve the product. Some of these product events are recorded against your account so we can see which features are used and fix problems; they are never sold or used for advertising, and they are deleted with your account. We also keep operational usage records tied to your account, such as how many reviews you run and the AI processing metrics and cost of each request, which we use to operate the service, enforce fair-use limits, prevent abuse, and manage billing.
2. How We Use Your Information
We use your information to:
- Generate AI coaching reports from your submitted clips
- Manage your account and subscription
- Send transactional emails (analysis complete, subscription receipts)
- Send newsletter emails if you have opted in
- Improve SiegeIQ's accuracy, features, and performance
- Detect and prevent fraud or abuse
We do not sell your data to third parties. We do not use your gameplay footage (raw video or audio) to train generative AI models. We do not share your personal information with advertisers. Scope note: parsed replay statistics extracted from .rec files, and checked ban-status labels, are data about match events, not footage of you, and may be used to train and validate our internal anti-cheat and match-integrity models as described in Sections 3 and 4 below.
3. Data Retention
Uploaded clips, and clips imported from a link such as Medal, are stored for 30 days on every plan, free and paid alike, and their raw video files are then automatically deleted to protect your privacy and minimize the data we hold. The spoken coaching readout is part of your report rather than raw footage, so it stays with the report. Your coaching reports, scores, and history are kept for as long as your account is active, so deleting the raw clip never removes your results. If you delete your account, all associated data is permanently removed within 30 days.
Map reference images. To help SiegeIQ recognise which map and which room a clip is from, we keep a small number of still images taken from your clips, normally no more than eight per review. These are kept beyond the 30 day window above, because the point of them is to build up over time. Before any image is stored we paint out the parts of the screen that carry other players' names, specifically the scoreboard along the top and the kill feed down the right hand side; if that step does not succeed the image is discarded rather than stored. If you would rather we kept none of yours, turn off "Help SiegeIQ learn the maps" in your profile settings, and ask us to delete your data and every image from your clips is removed with it.
Replay data about other players. Match statistics we hold about players who did not upload the replay are automatically deleted 400 days after upload. When that happens we delete every record describing them across our systems, including kill events, loadouts, movement tracks and the original replay file itself, and the uploader keeps only their own summary of the match. Any player may also ask us to delete data we hold about them at any time by emailing privacy@siegeiq.gg, whether or not they have a SiegeIQ account. Where we hold a limited competitive-integrity record about an account (for example, a checked ban status used to train and validate our anti-cheat models), we retain it for up to 1,095 days (3 years) under a documented anti-cheat and platform-security purpose, and delete it immediately once every match observation it could train against has already been deleted. It is never shown to other users, and it is never used to make an automated decision.
Competition data. Registration details, rosters, results, and published standings are retained as part of the permanent record of the event. Replay files and integrity materials submitted for a competition are retained until the event and any integrity review conclude, and are then deleted within 90 days, except where we are required to keep a record of a prize payment for tax or accounting purposes.
4. Third-Party Services
SiegeIQ uses the following third-party services, each with their own privacy policies:
- AI model providers - AI analysis engine. Requests currently go to Google (Gemini). Depending on availability we may also route them to Anthropic directly, to Amazon Bedrock, or through OpenRouter, Inc., which passes them to a model provider on our behalf. A request contains your match statistics and, for clip analysis, frames from the clip you uploaded, or your photo if you use the Avatar Maker's photo option. We configure these services not to retain your content for model training. We do not control their infrastructure, so please do not send SiegeIQ anything you would not want processed by a third party.
- Stripe - Payment processing. Stripe is PCI-DSS Level 1 certified.
- Cloudflare R2 - Encrypted video storage.
- Supabase - Database hosting. Data is stored in the Canada Central region.
- Clerk - Authentication and account management (sign-in and sessions).
- Resend - Transactional and newsletter email delivery.
- ElevenLabs - Cipher's voice, live voice calls, and speech-to-text. Coaching text is sent to generate audio. Your voice is sent when you call Cipher or ask a spoken question, and clip audio is sent when we read voice comms. Call audio is not recorded and call transcripts are deleted after 30 days. ElevenLabs handles this data under its own privacy policy.
- Third-party ban-status providers - Anti-cheat integrity. Where a replay you upload contains other players, we may check the public ban status of the in-game accounts in that match through an authorized third-party source. This is used only to train and validate our internal match-integrity models. We do not display any other player's ban status to you or to anyone else, and we do not publish, sell, or share it. Any player may request removal of their data via privacy@siegeiq.gg.
- Tournament platforms - Where a competition is operated on a third-party tournament platform, your registration, roster, and match data are processed by that platform under its own privacy policy. The platform in use is named on the event page before you enter.
5. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and all associated data
- Opt out of marketing emails at any time
- Data portability - request a copy of your coaching reports
- Object to processing based on our legitimate interests, including replay data
To exercise any of these rights, email privacy@siegeiq.gg and we will respond within 30 days.
If you are not a SiegeIQ user. These rights apply to anyone whose data appears in a match replay, including players who have never signed up. If another player uploaded a replay of a match you were in, you can ask us for a copy of the data we hold about you, or ask us to correct it, delete it, or stop processing it. Email privacy@siegeiq.gg with your Ubisoft profile ID or in-game name and we will respond within 30 days. You can also complain to a data protection authority: in Canada, the Office of the Privacy Commissioner of Canada; in the UK, the Information Commissioner's Office; in the EU, your local supervisory authority.
6. Cookies
SiegeIQ uses only essential cookies required for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Your theme preference is stored in your browser's localStorage, not in a cookie.
7. Security
All data is transmitted over HTTPS. Uploaded clips are stored with encryption at rest. Passwords are hashed using industry-standard bcrypt. We conduct regular security reviews and promptly address any vulnerabilities.
8. Children
SiegeIQ is not intended for users under the age of 13. If you are under 13, please do not use this service. If we become aware that a user under 13 has created an account, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email of any material changes. Continued use of SiegeIQ after a policy update constitutes acceptance of the new terms.
10. Contact
For privacy questions or data requests, contact us at:
privacy@siegeiq.gg
SiegeIQ - siegeiq.gg
