Privacy Policy
How we handle your data at DuoLink
DuoLink is operated by BladeLink Argentina. This policy explains what data we collect, how we use it, and what rights you have. We comply with Argentina Law 25.326, GDPR (EU) and LGPD (Brazil) where applicable.
Who we are
DuoLink is a platform available as a website (duo.bladelinkarg.com) and native mobile apps for Android (Google Play) and iOS (App Store), operated by BladeLink Argentina, based in Córdoba, Argentina. Contact: info@bladelink.company.
What data we collect
1. Account data: email, username, hashed password (if applicable), birth date, country, city, languages, platforms and play styles you declare.
2. Public profile: avatar, banner, bio, games, schedule and description you choose to show to other gamers.
3. Linked accounts: when you connect Riot, Steam, Discord, Google, Twitch, Battle.net or Nintendo Switch, we store your external identifier (PUUID, SteamID64, Friend Code, etc.), public username, avatar and public stats like rank or playtime. We never ask for third-party passwords — we use official OAuth or validation against public APIs.
4. Activity: swipes, matches, chat messages within DuoLink, Arcade matches, self-reported ranks.
5. Technical: IP address (for rate-limiting and fraud), user agent, last login time. We don't track browsing outside DuoLink.
6. Photos (optional): if you upload an avatar or banner from the mobile app, we access your gallery or camera only with your explicit permission and only the file you choose.
Mobile app permissions
On Android and iOS we only request the minimum permissions needed:
• Internet: to communicate with our servers (required). • Camera / Gallery: only when you upload an avatar or banner, and only after you tap the upload button. You can deny it and the app still works with your existing photos. • Notifications: optional, to alert you about new matches and messages. You can disable them from your OS settings anytime.
We do NOT use: GPS or precise device location (country/city are self-reported manually), microphone, contacts, SMS, calls, calendar, health sensors or biometrics. We don't track your activity outside the app. We do not use advertising identifiers (AAID / IDFA).
How we use your data
• Run matchmaking (shared games, country, schedule, rank) and display your profile. • Send magic login links to your email. • Notify you of matches and messages (email if offline; you can disable in preferences). • Protect the platform against spam and abuse. • Improve the product with aggregated metrics (without personally identifying you).
We don't sell your data to third parties. We don't use your information for behavioral ads outside DuoLink.
Third-party services
We use these providers to operate. Each has its own privacy policy:
• Vercel (front-end hosting · vercel.com/legal/privacy-policy) • Railway (back-end hosting · railway.app/legal/privacy) • MongoDB Atlas (database · mongodb.com/legal/privacy-policy) • Cloudinary (avatar/banner images · cloudinary.com/privacy) • Resend (email delivery · resend.com/legal/privacy-policy) • Sentry (error reporting · sentry.io/privacy) • Riot Games · Steam · Discord · Google · Twitch · Blizzard · Nintendo (OAuth and gaming APIs — each with their own policy)
Data retention
We keep your account active while you use it. If you delete your account from the profile, we do a soft-delete: your profile disappears from searches, matchmaking and public views within 60 seconds. Sent messages and historical matches are preserved anonymized for other participants. You can sign up again with the same email. If you don't log in for 24 months, we may archive your account and notify you via email beforehand.
Your rights
You have the right to: (1) access all data we store about you, (2) rectify incorrect information, (3) delete your account — full instructions at duo.bladelinkarg.com/en/data-deletion (inside the app: Profile → Danger Zone → Delete account), (4) port your data in JSON format, (5) object to specific processing, (6) withdraw consent from OAuth integrations at any time.
To exercise any right, email info@bladelink.company. We respond within 30 days.
Cookies and tracking
We use essential cookies to keep your session authenticated (NextAuth session token, HttpOnly). We don't use ad-tracking cookies or sell data to ad networks.
Minors
DuoLink is for users 13 or older. We don't knowingly collect data from children under 13. If you're a parent and believe your child created an account, contact us and we'll delete it.
Changes to this policy
If we make material changes, we'll notify you via email (if you have an account) or with a visible in-app banner, at least 14 days in advance. The 'Updated' date above reflects the last revision.
Contact
Privacy inquiries, data requests or account deletion: info@bladelink.company