Privacy Policy

The data controller is SemanticLab ("we"), the operator of RankMates.

For any question about your personal data or to exercise your rights, contact us at: semanticlab.buisness@hotmail.com.

We only collect the data needed to run the service:

• •Account data: email address, password (hashed, never in clear text), and a public pseudo (generated or chosen).
• •Connection data: IP address and browser type (user-agent), tied to your session, for security and abuse prevention.
• •Linked accounts (optional): if you sign in with Discord or Google, we receive an identifier, your email address and, for Discord, your Discord handle.
• •Profile and onboarding: your answers to the conversational questionnaire (region/timezone, age range, languages, playstyle, availability, teammate preferences), your bio, your avatar and the games you showcase.
• •Service usage data: your matches, mates, messages exchanged with your mates, and the reports you submit.

We do not collect any special-category data within the meaning of Article 9 GDPR (origin, opinions, health, etc.) and ask you not to enter any in free-text fields.

We process your data for the following purposes:

• •Providing the service (creating your account, matching you, enabling chat), legal basis: performance of the contract (our Terms).
• •Computing compatibility between players from your answers, legal basis: performance of the contract.
• •Securing the service, preventing fraud and moderating content (reports, bans), legal basis: legitimate interest.
• •Sending you transactional emails (verification, password reset), legal basis: performance of the contract.
• •Sending you the weekly email of your best matches, legal basis: legitimate interest, with the ability to opt out anytime in your settings.

To build your compatibility profile, the text you type during onboarding is analyzed by language models (AI) via third-party providers (see "Recipients"). This analysis extracts gaming-personality traits and is not used for automated decision-making producing legal effects. We apply safeguards to filter out hateful or inappropriate content.

Your data is never sold. It is shared only with the strictly necessary technical providers:

• •Cloudflare, hosting, database and application runtime.
• •Resend, email delivery.
• •OpenAI and Google (Gemini models), via OpenRouter and Cloudflare AI Gateway, AI analysis of onboarding text.
• •Discord and Google, only if you use sign-in through these services.

Some of these providers are located outside the European Union (notably in the United States). Transfers are governed by appropriate safeguards (European Commission standard contractual clauses).

• •Account and profile data: kept as long as your account is active. On account deletion, they are erased.
• •Connection data (IP, user-agent): kept for the duration of the session then purged.
• •Technical logs: kept for a short rolling window then automatically deleted.
• •Messages: deleted with the account or the relevant mate relationship.

In accordance with the GDPR, you have the following rights: access, rectification, erasure, portability, restriction and objection.

• •Access and portability: you can export all your data as JSON from Settings → Data.
• •Erasure: you can permanently delete your account from Settings → Danger zone.
• •Rectification: you can edit your pseudo, bio and onboarding answers from your account.
• •Objection: you can disable non-essential emails in your notification settings.

To exercise a right not directly available in the app, email us at semanticlab.buisness@hotmail.com.

RankMates asks for your age range at signup. We never match a minor with an adult: age is used to partition matches accordingly. If you are below the applicable digital age of consent in your country (15 in France), the agreement of a holder of parental authority is required.

We implement appropriate technical and organizational measures: hashed passwords, encryption in transit (HTTPS), restricted data access and content moderation. As no system is infallible, we encourage you to use a strong, unique password.

If you believe the processing of your data does not comply, you may at any time lodge a complaint with the CNIL (the French data protection authority), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

This policy may be updated. In case of a material change, we will ask you to accept it again at your next sign-in. The last-updated date appears at the top of this page.