Privacy Policy

Who we are

SurgeFPS is a commercial trade name operated under enterprise/VAT number BE2388358447. For the purposes of the GDPR, this is the data controller responsible for your personal data. You can reach us at [email protected].

Information we collect

• Account data — your email address and display name, used to sign you in and identify your account.
• Authentication data — securely hashed credentials and session/refresh tokens.
• Device identifier — a one-way hardware fingerprint (a hash) of the PC you activate Pro on. It cannot be reversed into your hardware details; it exists solely to enforce per-plan device limits and to bind your offline license to the machine.
• Device metadata — a device name (e.g. your PC name) and last-seen timestamp, so you can recognize and manage your devices.
• Subscription & billing data — your plan, status, and billing identifiers. Card details are handled entirely by our payment processor (Stripe); we never receive or store your full card number.
• Country of sign-up — the two-letter country code your sign-up request came from (e.g. “DE”), derived from your IP address at that moment by our hosting provider's edge network. We record the country only. We never store, log, or retain your IP address itself.

What we do NOT collect

• We do not collect your files, documents, screenshots, or game content.
• We do not track your browsing or the applications you run, beyond the game-detection that happens locally on your PC for the app's own features.
• The desktop app's optimization and monitoring run locally; your hardware telemetry (temps, usage) stays on your device.

How we use it

• To provide and secure your account and sign-in;
• To validate your license and enforce plan device limits;
• To process subscriptions, renewals, and cancellations;
• To provide support and to keep the service reliable and secure.
• To prevent abuse of our free trial — the device identifier above lets us enforce one trial per account and per PC, so the offer isn't repeatedly reclaimed with new accounts on the same machine;

Third parties

We share data only with providers that help us run the service:

• Stripe — payment processing and subscription management. See Stripe's privacy policy for how they handle payment data.
• Hosting & database providers — to run the website and store account/subscription records.
• Trustpilot — to send feedback/review invitations and host reviews you choose to leave (see "Feedback & review requests" below).
• Email provider — to deliver account, transactional, and review-invitation emails.
• Google — advertising and conversion measurement (Google Ads), so we can see which campaigns lead to signups. Only active if you accept advertising cookies.

We do not sell your personal data.

Feedback & review requests

After you have used SurgeFPS, we may send you a one-time email inviting you to share feedback or leave a review. For this we process your name, email address, and basic account/usage information (such as when you registered or last used the app) so the invitation is relevant and sent only once. Its sole purpose is to gather feedback and reviews so we can evaluate and improve the quality of SurgeFPS — it is not promotional marketing about other products.

Legal basis — legitimate interest (Art. 6(1)(f) GDPR). We rely on our legitimate interest in improving our service quality and reputation. We consider the privacy impact low: it uses only contact and basic account data you already gave us, it is a single non-repeating invitation about a product you have used, we do not use it to profile you or sell you anything, and you can object at any time. Where consent is the more appropriate basis — for example for users who have not made a purchase — we rely instead on the opt-in you gave when creating your account, and we do not send review invitations without it.

To send these invitations we share your name and email address (and, where relevant, an order/usage reference) with Trustpilot and our email provider, acting as processors on our behalf. Trustpilot's handling of a review you publish on their platform is governed by Trustpilot's own privacy policy.

Opting out. You can decline or stop receiving feedback and review invitations at any time using the unsubscribe link in the email, from your account settings, or by emailing [email protected]. This will not affect your use of SurgeFPS.

Cookies & local storage

The website uses local storage to keep you signed in (your session and refresh tokens); this is strictly necessary and is not used for tracking. We also use Google Ads conversion measurement to understand which ads lead to signups. Advertising cookies are disabled by default under Google Consent Mode and are only set if you accept them in our cookie banner — you can decline, and the site works normally either way.

Data retention

We keep account and subscription data for as long as your account is active, and as needed to comply with legal, tax, and accounting obligations. When you delete your account, we remove or anonymize your personal data except where retention is legally required.

One exception to deletion: the one-way device identifier of a PC that has used a free trial is kept after the associated account is closed. If it were erased with the account, deleting an account would reset the trial and the limit could be bypassed indefinitely. This retained record is a hash tied to no name, email, or address, cannot be reversed into your hardware details, and is used for nothing but enforcing the one-trial-per-machine limit. Our legal basis is our legitimate interest in preventing fraud and abuse (Art. 6(1)(f) GDPR).

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email [email protected].

Contact

Questions about privacy? Email [email protected].