Privacy policy

About this policy

This policy describes how the CHECK-BOOST administration processes data of visitors, users and server owners on check-boost.ru. It covers the website, its API and the connected analytics plugin. The contact for data enquiries is listed below.

Data is used to provide the features you choose, fulfil service obligations, protect the site and handle enquiries. Where processing requires consent, it is requested for the relevant purpose. Accepting cookies does not authorise every possible use of data.

Data the site needs

Account: username, email, password verification hash, avatar and registration and login records. These support authentication, access recovery and profile settings. VK login uses the identifier and available profile details you share through VK ID.

Services: linked servers and monitorings, balance, transactions, subscriptions, notification settings and support requests. Payments involve the amount, status and payment identifier. Bank card details are entered with the payment provider, not in CHECK-BOOST forms.

Technical data: IP address, browser information, request time and address, error and activity logs. These support page delivery, abuse prevention, diagnostics and access protection. Some preferences are stored only in your browser.

Game server analytics: the owner-installed plugin sends game sessions, maps, playtime, client build markers, SteamID and player IP; nicknames are sent if enabled by the owner. IP is used to estimate the country. Server owners must inform players about this processing.

What other visitors can see

Usernames, avatars, published reviews and ratings, community chat messages, profiles and public server and monitoring details may be public. Do not post passwords, private contacts or other people’s personal data in these fields.

Email, authentication data, secret keys, SSH credentials and support conversations are excluded from the public catalogue and API. Plugin IP and SteamID appear only in private analytics for the owner with an active subscription, not on public server pages.

Optional visitor analytics

Yandex Metrica starts after you choose “Accept”. With “Necessary only”, its script is not loaded. The service uses browser identifiers, visit parameters and visited public page addresses for audience statistics and site improvements.

Our integration disables Session Replay, click maps and automatic link tracking. Private areas, login forms, accounts and server management are excluded from page-view reporting; secret URL parameters are not sent. Yandex’s own policy describes its processing.

You can change your choice using “Cookie settings” in the footer. When analytics is disabled, the site stops its counter and removes accessible Metrica cookies and storage entries on its domain. Use browser settings to remove data belonging to third-party domains.

Integrations and data sharing

VK ID is used when you choose VK login or profile linking. Telegram receives messages and the chat identifier when notifications are connected. The email service delivers service messages. The payment provider handles payments under its own rules. Each service receives information needed for that feature.

Server management uses SSH credentials entered by the owner to connect to the specified game server. Access requires ownership and an active subscription. The public API returns permitted public data only. Requests from authorised authorities are handled as required by law.

Third-party services have their own policies; processing locations depend on the integration used. External links may lead to resources whose data processing is outside the control of CHECK-BOOST.

Access protection

The site uses HTTPS, role-based access, server ownership checks and request protection. Passwords are checked using hashes. Stored SSH passwords and private player identifiers are encrypted; plugin and public API keys are checked using hashes. Staff access is limited to assigned permissions.

Never share passwords or keys in reviews, chat or messages intended for other users. If a key is compromised, rotate it in the relevant section and contact support.

Retention and deletion

Account data is used while needed to operate the account, provide services and resolve enquiries. Transaction records may be retained for accounting and service obligations. Deletion requests are reviewed separately for any records that must be retained on another lawful basis.

Private plugin game sessions are cleaned up after 90 days without activity on the record. Authentication sessions are deleted after expiry. Backups and technical logs have separate retention cycles; deletion requests are taken into account when restoring backups.

Requests about your data

You can request information about your data, correction, restriction or deletion, and withdraw consent where processing relies on it. Include your username, profile or server link and the request. Ownership verification may be needed to protect the account, but do not send passwords or SSH keys.

Email the address below or contact support. Requests are handled within the legal timeframe applicable to their type. Policy changes are published here with an updated date; a material change of processing purpose does not replace any required separate consent.