Privacy Policy

PRStats is a Rainbow Six Siege analytics platform for event hosts and teams. This page describes how we handle your data on the PRStats web application (statrunners.com) and the PRStats Connect Chrome extension. We aim to collect as little as possible and to be specific about what each component does.

When you sign in with Discord, we receive your Discord user ID, username, avatar, and (if you grant the email scope) email address from Discord. We use these to create your PRStats account and identify you across sessions. We do not receive your Discord password.

When you upload a Rainbow Six Siege replay (.rec) file, we parse it to extract match data and player statistics. This data is stored in our database and used to power the PRStats analytics features. The data is associated with your account and the workspace(s) you belong to.

Authentication uses a JWT stored in an HttpOnly cookie (prstats_token) scoped to statrunners.com. The cookie is used to identify your authenticated session and is removed when you log out.

The PRStats Connect extension exists for one purpose: to verify that you control a specific Ubisoft account so it can be linked to your PRStats profile. It does not run continuously, does not collect browsing history, and does not modify any web page you visit.

What it reads

When you are signed in to ubisoft.com and visit the account page, your browser natively makes a single API call to https://public-ubiservices.ubi.com/v3/users/<userId>/profiles. The extension reads the JSON response of this one specific call. It does not read any other Ubisoft pages, accounts, headers, cookies, or stored credentials.

From that response, the extension forwards two fields to the PRStats backend: your Ubisoft user ID (Uplay UUID) and the Discord ID Ubisoft has on file for your account. The Discord ID is matched against the one on your PRStats account to confirm ownership; the Ubisoft user ID is stored to associate replay-file statistics with your profile.

What it does not read

• It does not read your Ubisoft password, email, or 2FA codes.
• It does not read or store your Ubisoft authentication ticket.
• It does not read any other Ubisoft API responses or pages.
• It does not run on websites other than ubisoft.com and statrunners.com.
• It does not transmit data to any third party other than the PRStats backend.

What it stores locally

The extension uses chrome.storage.session to temporarily hold a one-time claim code (a random 32-byte string) generated by your PRStats onboarding page. The claim code expires after 5 minutes and is deleted as soon as account linking completes. No other data is stored locally by the extension.

Source code

The extension is intentionally small (under 200 lines of JavaScript in total) so it can be read and audited end-to-end. Source is available alongside the rest of PRStats in the project repository.

You can delete your PRStats account at any time from the account settings. When you do, your account is anonymized: identifying fields (email, Discord username, avatar) are cleared, and you are removed from all workspaces. Aggregated player-profile stats may be retained for the integrity of leagues and events you participated in; they are no longer linked to identifying information about you.

The extension stores no data persistently. Uninstalling it removes everything it ever wrote.

For privacy questions or deletion requests, contact luis.tapia7789672@gmail.com.