AACGUARD GDPR Notice
This page explains how AACGUARD approaches personal data protection under the General Data Protection Regulation (“GDPR”) and similar privacy laws. It summarizes what personal data may be processed, why it is processed, the legal bases relied on, your rights, and how to contact us regarding privacy-related matters.
Last updated: April 1, 2026
1. Scope of this GDPR notice
This GDPR notice applies to the AACGUARD website, web panel, related APIs, contact forms, support channels, payment-related flows where applicable, and other connected services that involve the processing of personal data.
It should be read together with our Privacy Policy, Cookies Policy, and Terms of Use.
2. Data controller and contact details
For the purposes of the GDPR, the data controller for AACGUARD is Pelea Raul-Daniel, acting as a natural person owner of the aacguard.com domain and the AACGUARD application.
AACGUARD is operated from Cluj-Napoca, Romania. Privacy-related questions, access requests, correction requests, deletion requests, and other GDPR inquiries may be submitted to:
3. Who this notice applies to
This notice applies to website visitors, server administrators, account holders, support contacts, paying customers where applicable, and players whose scan-related data may be submitted to or reviewed through AACGUARD.
AACGUARD is an international service. GDPR protections may apply where required by law, including where AACGUARD offers services to individuals in the European Economic Area or otherwise falls within the territorial scope of the GDPR.
4. Categories of personal data we may process
Depending on how AACGUARD is used, we may process the following categories of personal data:
- Account and identity data, such as usernames, account email addresses, login-related details, and administrator profile information.
- Game-related identifiers, such as Steam ID, Steam display name, server context, and related moderation identifiers.
- Scan-related metadata, such as scan timestamps, triggered modules, scores, verdicts, and review context.
- Technical and security data, such as IP addresses, browser type, device data, operating system details, logs, and anti-abuse signals.
- Communication data, such as messages sent through contact forms, support requests, business inquiries, or abuse reports.
- Cookie, consent, and preference data collected through website consent and settings tools.
- Analytics and usage data, such as page views, interactions, referral information, performance data, and approximate location insights.
- Transaction or payment-related data where applicable, such as billing contact details, transaction references, payment status information, and payment-provider confirmation data.
AACGUARD does not present its standard website and service flows as intentionally collecting special category personal data.
5. Where personal data comes from
Personal data may be obtained directly from you, automatically through your use of the website or related services, from administrators who operate servers using AACGUARD, from payment or infrastructure providers where applicable, and from technical systems involved in security, moderation, support, fraud prevention, and service delivery.
6. Why we process personal data
We process personal data to operate and secure AACGUARD, provide access to accounts and dashboard features, review scan results, support moderation workflows, respond to inquiries, maintain logs, process payments where applicable, comply with legal obligations, improve service performance, and protect the integrity of the platform.
We may also process data to prevent abuse, investigate suspicious activity, troubleshoot failures, enforce our Terms of Use, and maintain reliable infrastructure and support operations.
7. Legal bases for processing
Depending on the context, AACGUARD may rely on one or more of the following GDPR legal bases:
| Legal basis | Typical use at AACGUARD |
|---|---|
| Contract | Providing requested services, account access, dashboard features, support, scan review functions, and service-related operations. |
| Consent | Non-essential cookies, analytics, marketing technologies, optional embeds, and similar user-controlled features. |
| Legitimate interests | Platform security, fraud prevention, abuse detection, service improvement, operational logging, moderation integrity, and infrastructure protection. |
| Legal obligation | Compliance with applicable laws, lawful requests, accounting, tax, recordkeeping, and regulatory duties. |
8. Who may receive personal data
Personal data may be accessible to authorized AACGUARD personnel or contractors where necessary, as well as hosting and infrastructure providers, analytics providers, security and anti-abuse vendors, communication or support providers, embedded content providers, and payment processors where applicable.
Depending on the service involved, such parties may act as processors, service providers, or independent controllers for their own functions and compliance obligations.
9. International transfers
Some service providers used by AACGUARD may process personal data outside the European Economic Area. Where that occurs, transfers are intended to rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, or equivalent legal mechanisms where required.
Because AACGUARD is an international digital service, cross-border processing may occur through cloud hosting, analytics, security tools, embedded services, support systems, or payment providers.
10. Data retention
AACGUARD keeps personal data only for as long as reasonably necessary for the purposes described in this notice, including service delivery, security, moderation review, legal compliance, dispute handling, accounting, and legitimate operational needs.
Retention periods may vary depending on the category of data, the feature involved, the sensitivity of the information, and whether the data is needed for fraud prevention, support history, legal defense, or regulatory obligations.
11. Security measures
AACGUARD uses technical and organizational measures intended to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, and unlawful processing.
These measures may include access controls, authentication protections, infrastructure security, logging, rate limiting, abuse monitoring, provider-level safeguards, and reasonable internal restrictions on who can access data.
No internet-based service can guarantee absolute security, but we aim to apply proportionate safeguards appropriate to the nature of the data and service.
12. Your GDPR rights
Subject to applicable law and any lawful limitations, individuals may have the right to:
- Request access to their personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion of personal data in certain circumstances.
- Request restriction of processing in certain circumstances.
- Object to processing based on legitimate interests.
- Withdraw consent where processing relies on consent.
- Request data portability where applicable.
- Lodge a complaint with a competent supervisory authority.
13. How to exercise your rights
To exercise your privacy rights or ask questions about how AACGUARD processes personal data, please contact us at support@aacguard.com or through the Contact page on the site.
We may need to verify your identity before responding to a request, especially where the request relates to account access, scan-related records, payment history, or sensitive security logs.
14. Complaints and supervisory authority
If you believe your personal data has been handled in a way that does not comply with applicable law, you may lodge a complaint with your local supervisory authority.
For Romania, the competent supervisory authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP) / Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal.
According to the authority’s published guidance, complaints may be submitted in writing in Romanian or English, including by post, email, registry filing, or by using the complaint procedure available on the authority’s website.
Supervisory authority website: https://www.dataprotection.ro
15. Children and minors
AACGUARD is not designed as a child-directed service. If minors use game servers or web features connected to AACGUARD, any related data handling is intended to remain limited to the operational, security, moderation, and service purposes described here.
16. Changes to this GDPR notice
We may update this GDPR notice from time to time to reflect changes in the service, legal requirements, vendor relationships, international transfer practices, or data handling operations.
When we do, we will update the “Last updated” date on this page.
17. Related documents and contact
For more information, please review our Terms of Use, Privacy Policy, and Cookies Policy.
Privacy-related questions and requests should be sent to support@aacguard.com or submitted through the Contact page on this site.