Privacy Policy

2.1 Account Information

When you create an account, we collect:

• Email address or phone number (for authentication)
• Username and display name
• Profile photo (optional)

2.2 Location Data

We may collect location information to:

• Provide location-relevant content and features
• Detect scam accounts, ban evasion and repeat offenders, and protect account integrity

We collect it two ways. An approximate location (country and city) is derived from your IP address; this does not use a device permission and happens whenever you sign in. A precise location is collected from your device only if you grant the location permission.

Turning off location services on your device stops the precise location only — approximate location from your IP address continues. To stop all location collection and delete what we have already stored, turn on "Never store my location" in Settings under Privacy.

2.3 Device Information

For anti-fraud and security purposes, we collect:

• Device type and operating system
• App version
• Device identifiers (generated by our app, not hardware IDs)
• IP addresses used to access the Service
• Risk assessment scores derived from the above

We use this information to detect scam accounts, ban evasion, and multiple accounts operated by the same person. Fallout 76 trading attracts a high volume of scam attempts, and account-level bans alone are trivially evaded by registering again.

Where an account is banned for scamming or fraud, the device identifiers and IP addresses associated with it may be added to a blocklist and retained indefinitely — including after the account is deleted — so that the ban cannot be evaded. This is an exception to the retention periods in Section 6, and it is the only purpose for which we keep that data beyond them.

This data has exactly one use: keeping scammers, fraudsters and banned users off the platform. We do not use it to build advertising or marketing profiles, to rank or personalize what you see, to train models, or for any purpose unrelated to safety and fraud prevention — and we do not sell, rent or license it.

2.4 Messaging Data

When you use direct messaging or chat features, we store the content of your messages to deliver them to the intended recipients. Hub: 76 administrators may review messages, including direct messages, for safety, moderation, and enforcement of our Terms of Service. When you report a conversation, a snapshot of the chat history is stored for administrative review.

2.5 Usage Data

We automatically collect:

• Listings and content you view, create, and interact with
• Trade and community activity
• Interaction patterns (for bot detection)
• Session information and timestamps

2.6 Community Scam Reports (Third-Party Sources)

We maintain a list of gamertags reported for scamming in the Fallout 76 trading community. Most of it is not collected from you or from your activity on Hub: 76 — it is imported from scam lists that third parties publish publicly, currently the Market 76 and The Unstoppables community lists. An entry records the gamertag, the platform, which list it came from, and any alternate handles reported alongside it.

When you link a gamertag, we check it against this list. A match may block the link, restrict trading, or result in a ban.

We do not control these lists, did not compile them, and do not vouch for their accuracy. If you believe your gamertag is listed in error, contact support@hub76.app — a person will review the match, and we can clear it on Hub: 76 regardless of what the source list says. Getting the entry removed from the source list itself is a matter for whoever publishes that list.

2.7 Gaming Platform Account Identity

Where a gamertag is linked to Hub: 76 or appears in a scam report, we may store a stable identifier for the underlying platform account, together with the handles we have observed that account using.

An enforcement decision attaches to the platform account, not to the display name, so changing a gamertag does not clear it. This protects against the opposite mistake too: it is the account, not the name, that has to match before we act.

We store only that identifier and the handles attached to it. We do not collect your platform password, payment details, friends list, messages, or any other account content, and we use this only for the anti-fraud purpose described in Section 2.4.

3.1 Service Operation

• Authenticate and maintain your account
• Display relevant listings and content
• Facilitate trading and community features
• Process in-app purchases and subscriptions
• Provide customer support
• Review messages and content for safety, moderation, and Terms enforcement

3.2 Verification and Integrity

• Verify you are a real human (anti-bot measures)
• Confirm residency where required for certain features
• Protect account integrity and prevent duplicate accounts

3.3 Analytics and Improvement

We use aggregated, anonymized data about how the Service is used to operate, secure, and improve the platform. This data cannot be linked back to you and is never sold in a form that identifies you.

3.4 Content Moderation

To maintain a safe environment, Hub: 76 uses both automated systems and human review to moderate user-generated content:

• Automated image moderation: Images uploaded to Hub: 76 (profile photos, post media) are analyzed by AI-powered content moderation to detect and block nudity, violence, gore, hate symbols, and other prohibited visual content. Images that violate our policies are rejected before they are published.
• Text moderation: Listings, comments, and messages are screened for profanity, threats, hate speech, harassment, and spam using automated pattern matching.
• Human review: Flagged content and user reports are reviewed by Hub: 76 administrators who may take action including content removal and account suspension.

Content moderation is performed solely for safety and policy enforcement. We do not use moderated content for advertising, profiling, or any purpose unrelated to platform safety.

4.1 Service Providers

• Apple and Google (in-app purchase processing)
• Supabase (database and authentication)
• Cloud hosting providers

4.2 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights, safety, or property.

5.1 All Users

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Delete your account in Settings, which permanently removes your profile and personal data — except the narrow categories listed in Section 6. In particular, device identifiers and IP addresses blocklisted for scamming, fraud or ban evasion are retained indefinitely under Section 2.4

Deleting your account does not lift a ban and does not clear a blocklist entry. If it did, deletion would be a one-tap way for a banned scammer to return, and the ban would mean nothing.

• Portability: Export your data in a standard format

5.2 European Economic Area & UK (GDPR)

If you are in the EU/EEA or United Kingdom, you also have the right to:

• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Withdraw consent at any time
• Lodge a complaint with your supervisory authority

Legal basis for processing, by purpose:

• Operating your account, messaging, trading and purchases — performance of a contract (Art. 6(1)(b))
• Fraud prevention, scam detection, ban enforcement, device and IP blocklisting, bot detection and platform security — legitimate interests (Art. 6(1)(f)). Recital 47 names fraud prevention expressly as a legitimate interest
• Precise device location, and optional research participation — consent (Art. 6(1)(a))
• Responding to lawful requests, and retaining consent records — legal obligation (Art. 6(1)(c))

Security and anti-fraud processing is not based on consent, and withdrawing consent does not stop it. Withdrawal applies only to the purposes listed above as consent-based. The right to erasure does not apply where processing is necessary to establish, exercise or defend legal claims (Art. 17(3)(e)), and we may refuse an objection under Art. 21 where we have compelling legitimate grounds — keeping a banned scammer off the platform is such a ground.

UK residents: Your rights under UK GDPR mirror EU GDPR. You may lodge complaints with the Information Commissioner's Office (ICO).

5.3 California Residents (CCPA/CPRA)

California residents have the right to:

• Know what personal information we collect
• Delete your personal information
• Opt-out of the sale of personal information (we do not sell)
• Limit use of sensitive personal information
• Non-discrimination for exercising your rights

Sensitive Personal Information: We collect precise geolocation (with consent) for service functionality. You can limit this use in Settings.

Deletion requests are subject to the exemptions in Cal. Civ. Code § 1798.105(d), including retention necessary to detect security incidents and to protect against malicious, deceptive, fraudulent or illegal activity. Device identifiers and IP addresses blocklisted for fraud are retained on that basis.

5.4 Canadian Residents (PIPEDA)

Under PIPEDA, you have the right to:

• Access your personal information
• Challenge the accuracy of your information
• Know how your information is used
• Withdraw consent (subject to legal restrictions). PIPEDA s. 7 permits us to collect, use and disclose personal information without consent where it is reasonable for investigating a breach of an agreement or a contravention of law — which is the basis on which we investigate scams and fraud

For Quebec residents: We comply with Law 25 requirements including privacy impact assessments for sensitive processing.

5.5 Quebec Residents (Law 25)

In addition to PIPEDA rights, Quebec residents have:

• Right to data portability in a structured format
• Right to be informed of automated decision-making
• Right to request deletion in compliance with Law 25 timelines

We have conducted privacy impact assessments for processing that may present privacy risks. Contact support@hub76.app for details.

5.6 Automated Decision-Making

We use automated systems to detect scams, fraud, ban evasion, duplicate accounts, bot activity and prohibited content. These systems can restrict, suspend or ban an account, and can block a device or IP address, before any person has reviewed the case. The signals include device identifiers, IP addresses, relationships between accounts, and behavioural patterns.

You have the right to human review of any such decision. Contact support@hub76.app: a person will review it, and you may contest the decision and put your side of it. We do not disclose the specific signals or thresholds involved, because publishing them would tell the accounts we are detecting how to avoid detection.

9.1 Age Requirement

Hub: 76 is intended for users aged 18 and older only. We enforce this through a mandatory date-of-birth verification during account creation. Users who do not meet the minimum age requirement are blocked from creating an account. We do not knowingly collect information from anyone under 18. If we discover we have collected information from a person under 18, we will delete it immediately and terminate the associated account.

9.2 Zero Tolerance for CSAE

Hub: 76 maintains a strict zero-tolerance policy toward child sexual abuse material (CSAM) and any form of child sexual abuse and exploitation (CSAE) content. This includes:

• Any imagery, video, or text depicting or promoting the sexual exploitation of minors
• Grooming behavior or solicitation of minors
• Sharing, distributing, or requesting CSAM
• Any content that sexualizes minors in any context

9.3 Reporting & Enforcement

Hub: 76 provides in-app reporting tools that allow any user to flag content or accounts that violate our child safety policies. When CSAE content is identified or reported, Hub: 76 will:

• Immediately remove the content from the platform
• Permanently ban the offending account
• Preserve evidence and report to the National Center for Missing & Exploited Children (NCMEC) via the CyberTipline
• Cooperate fully with law enforcement and relevant authorities

9.4 Contact

If you have any concerns related to child safety on Hub: 76, contact us immediately at support@hub76.app. We treat all child safety reports with the highest priority.