Privacy Policy

Last updated: March 27th, 2026

This Privacy Policy explains how Osirion AS ("Osirion", "we", "us", or "our") processes personal data when you use the Osirion website, app, subscriptions, organizations, replay-upload features, and APIs.

Osirion provides game-data, analytics, coaching, tournament, and developer products. We are not affiliated with Epic Games or other game publishers unless explicitly stated otherwise. Supported games, services, and content remain the trademarks and property of their respective owners.

1. Controller and Contact Details

Controller: Osirion AS

Address: Gaustadalleen 21, Oslo, 0349, Norway

Contact: [email protected]

Osirion has not appointed a separate Data Protection Officer at this time.

2. Scope of This Notice

This notice covers personal data relating to:

• - website visitors and app users
• - account holders who sign in with Discord
• - users who link Epic accounts
• - organization owners, members, and invitees
• - API customers, developers, and key holders
• - users who upload replay files or use analysis features
• - public players and accounts whose public game data may appear in Osirion products

3. Personal Data We Collect

Depending on the product or feature you use, we may process the following categories of data:

• - account and identity data, including email, username, Discord ID, global name, discriminator, avatar, banner, and verification status
• - linked account data, including Epic account IDs, Epic names, and linked-account metadata
• - subscription, payment, and billing data, including Stripe customer IDs, subscription IDs, plan information, organization seats, and billing events
• - API customer data, including API keys, credits, upload history, billing-related usage records, and endpoint access metadata
• - replay uploads, replay metadata, and related generated analysis outputs
• - organization membership, invite, and seat-management data
• - analytics, log, and security data, including request metadata, abuse-prevention signals, and operational logs
• - consent and advertising data, including Cookiebot consent status, ad-related state, and cookies or similar identifiers
• - communications data, such as support messages, transactional emails, and service notifications
• - public game data, player identifiers, tournament results, match data, and related derived statistics made available from lawful sources

4. Where We Get Personal Data From

We collect personal data directly from you and from other lawful sources.

• - directly from you when you sign in, link accounts, subscribe, upload replays, create API keys, buy credits, or contact us
• - from Discord when you authenticate through Discord OAuth
• - from Epic and related game-data sources when you link accounts or use supported features
• - from Stripe and related billing providers when you purchase or manage subscriptions and credits
• - from public or authorized third-party game-data sources used to power public stats, tournament data, and API responses
• - from your browser or device through cookies, analytics, consent, and security tooling
• - from organization owners or inviters when they invite or manage members

5. Why We Process Data and Our Lawful Bases

We process personal data for the following purposes and on the following lawful bases:

• - To provide the service and your account: contract
• - To authenticate users and linked accounts: contract and legitimate interests in account security
• - To provide subscriptions, organizations, billing, API access, and replay processing: contract
• - To prevent abuse, secure the platform, investigate incidents, and operate our products: legitimate interests
• - To keep records required for accounting, tax, legal, and compliance purposes: legal obligation
• - To store and respect cookie and advertising choices: consent where required, and legitimate interests or legal compliance where applicable
• - To serve personalized advertising where permitted: consent where required
• - To measure product usage and improve reliability and performance: legitimate interests, and consent where required by law
• - To send transactional and service communications: contract and legitimate interests
• - To send marketing communications where applicable: consent or another lawful basis permitted by applicable law

Where we rely on legitimate interests, those interests generally include protecting Osirion, maintaining platform integrity, preventing fraud and misuse, debugging issues, and improving the quality and reliability of our services.

6. Recipients and Service Providers

We do not sell your personal data. We do share personal data with service providers and partners where needed to operate Osirion.

• - Discord, for account authentication and account data provided through Discord OAuth
• - Epic and related game-data sources, for linked-account and supported feature functionality
• - Stripe, for subscriptions, billing, and payments
• - Cookiebot, for consent management and cookie declarations
• - Google, including Google AdSense and related advertising services
• - Fathom Analytics, for website and product analytics
• - Loops, for transactional and contact-management email workflows
• - Cloudflare and related infrastructure providers, for security, delivery, and hosted media functionality
• - Google Cloud logging and related observability tooling where used for operational logging
• - Osirion backend services and infrastructure providers used to deliver analytics, replay processing, API responses, billing, storage, and security

7. International Transfers

Some of our service providers may process personal data outside Norway or the EEA/UK/Switzerland. Where this happens, we rely on applicable transfer mechanisms and provider safeguards, such as contractual commitments or equivalent legal transfer tools, as required by applicable law.

8. Retention

We keep personal data only for as long as needed for the purposes described above, including to provide the service, maintain security, resolve disputes, enforce agreements, and comply with accounting, tax, and legal obligations.

• - account data is generally retained while your account is active and for a limited period afterward where needed
• - session and authentication data is retained until expiry, invalidation, or short-term operational necessity
• - billing and payment-related records may be retained as required by law and bookkeeping obligations
• - API keys, usage data, and replay-upload records may be retained for security, billing, fraud prevention, and support purposes
• - logs and consent records may be retained for security, troubleshooting, and compliance purposes for limited periods

9. Your Rights

Subject to applicable law, you may have the right to:

• - access your personal data
• - correct inaccurate personal data
• - request deletion of personal data
• - restrict processing
• - object to certain processing
• - receive personal data in a portable format
• - withdraw consent where processing is based on consent
• - lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet)

To exercise your rights, please contact us at [email protected]. We may ask you to verify your identity before acting on a request.

11. Public Game Data and Non-User Data

Some Osirion features and APIs display or process public player, tournament, match, event, leaderboard, and related gameplay data that may concern individuals who do not have Osirion accounts. This can include Fortnite competitive event information, tournament results, public match-related data, and related derived statistics that we obtain from public or otherwise authorized sources.

Where we lawfully process such public or authorized source data, this notice also applies to that processing. If you believe your personal data is being processed through such features and want more information, contact us using the details below.

12. Children

Osirion is not directed to children under 13. If you are under the age at which you can lawfully consent to data processing in your country, you should only use Osirion with appropriate parental or guardian authorization.

13. Changes to This Notice

We may update this Privacy Policy from time to time. We will update the date above when we make changes. If we make material changes, we may also provide additional notice where appropriate.

14. Contact and Complaints

For privacy-related questions, requests, or complaints, contact [email protected].

You also have the right to lodge a complaint with Datatilsynet if you believe our processing of your personal data violates applicable law.