Privacy policy

Last updated: September 23, 2026

pcgaming.io is run by AppsDoc LLC, a company registered in Wyoming, USA ("we", "us"). This policy explains what personal data we collect when you use the site and the pcgaming.io Windows app, why we collect it, and what you can do about it. We collect as little as we can. There are no advertising or analytics trackers on the site.

Who is responsible

AppsDoc LLC is the controller of your personal data. For any privacy question or request, write to [email protected].

What we collect

Accounts

If you create an account we store your name, email address and a hashed password. For each signed-in session we store the IP address and browser user agent used to sign in, for security, until the session expires (30 days) or you sign out.

Rig reports (PCG Score)

When you score a PC, from the web form or the Windows app, we keep only:

  • device type (desktop, laptop or handheld)
  • processor model, graphics card model(s) and video memory
  • total memory, drive types (NVMe, SSD or hard drive), display resolution and refresh rate
  • the resulting scores and the catalog parts we matched

The Windows app also reads your Windows version, driver versions, drive models and sizes, and processor clock speeds so it can show them to you. These are discarded after scoring. We never collect serial numbers, network (MAC) addresses, file names, your Windows username or anything about the games you play.

Rig reports are private links. They are not listed in search engines and are only visible to people you share the link with.

Server logs

Like any website, our servers record the IP address, requested page, time and browser user agent of each request.

Your browser

The site stores a sign-in cookie when you log in, and remembers the graphics card and processor you last picked in your browser's local storage. See the cookie policy.

Why we use it

  • To run your account and save your rigs (performance of our contract with you).
  • To keep the service secure, prevent abuse and fix problems, using logs and session data (our legitimate interest in a safe, working service).
  • To answer you when you write to us (our legitimate interest, or steps you asked for).
  • To meet legal obligations where they apply.

We do not sell your personal data, share it for cross-context behavioral advertising, or use it to build advertising profiles.

How long we keep it

  • Account data: until you delete your account.
  • Sessions: until they expire (30 days) or you sign out.
  • Rig reports saved to an account: until you delete them or your account. Reports not saved to an account: 12 months, then deleted automatically.
  • Server logs: up to 14 days.
  • Encrypted backups: 14 days, so deleted data can remain in a backup for up to 14 days.

Who processes it for us

  • Our hosting provider, with servers in Frankfurt, Germany, where the site and database run.
  • Cloudflare, which delivers the site and protects it from attacks. It processes standard request data such as your IP address.

These providers act on our instructions and may not use your data for their own purposes. Because AppsDoc LLC is a US company, your data may be accessed from the United States. Where the law requires it, we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard for these transfers.

Your rights

Depending on where you live, including the EU, UK and several US states such as California, you have the right to:

  • access the personal data we hold about you and get a copy of it
  • correct data that is wrong
  • delete your data (you can delete your account and rigs yourself on the Account page)
  • object to or restrict processing based on our legitimate interests
  • receive your data in a portable format
  • complain to your local data protection authority

Write to [email protected] to use any of these rights. We reply within one month and never treat you differently for using them.

Children

The site is not aimed at children under 13, and accounts are for people aged 16 or older. If you believe a child has given us personal data, contact us and we will delete it.

Security

Traffic is encrypted with HTTPS, passwords are stored as salted hashes, and backups are encrypted. No system is perfectly secure, but we limit what we collect so there is less to protect.

Changes

If we change this policy we update the date at the top. For significant changes we will say so on the site or email account holders.