Privacy and legal notice
Updated on 6 November 2026.
In short
- Without an account, AimPro sends none of your data: profiles, crosshairs, stats and settings stay in your browser.
- The account is optional. Its only purpose is to get your data back on your other devices.
- No cookies, no ads, no selling of data.
- You can download your data and delete your account at any time from the my setup page.
Who is responsible
AimPro is a personal, non-commercial website published by a private individual. As allowed by article 6, III, 2 of the French LCEN law, their identity is not published here; it is known to the hosting provider.
Contact (questions, exercising your rights): contact address being set up. Meanwhile, exporting and deleting your data is done directly on the site.
Website hosting: Cloudflare, Inc. (Cloudflare Pages), 101 Townsend Street, San Francisco, CA 94107, United States.
What is collected
Without an account
- In your browser (localStorage): your profiles, sensitivities, crosshairs, preferences, your list of games and your stats. They never leave your device. You can erase them in “stats” or by clearing the site's data.
- Audience measurement: Cloudflare Web Analytics, with no cookie and no identifier, gives aggregated visit counts.
With an account
- Sign-in identity: your email address (magic link sign-in) or, with Discord, your Discord ID, username, avatar URL and the email address of your Discord account (“identify” and “email” scopes only).
- Your AimPro data: profiles (mouse, DPI, per-game sensitivities, hand and pad, training preferences, lock), saved crosshairs, training stats, active profile and your list of games.
- Player profile (optional): the username you choose and, if you add one, your profile photo. The username must be unique and only you can see it for now (there is no public page). The photo is cropped to a 256-pixel square and re-saved in your browser before upload: its metadata (shooting location, device, date) is never sent. Accepted formats: JPEG, PNG or WebP, 2 MB maximum. It is kept in a private space (Supabase Storage) that only your account can read, change or delete. Without a photo, an avatar is generated from your account ID, without sending anything.
- Technical security data: sign-in time, IP address and browser used for the session, kept by Supabase in its logs for the security of the service.
Nothing else: no real name, no date of birth, no payment data.
Why (purposes and legal bases)
- Providing the account and syncing your data across devices: performance of the service you ask for (GDPR article 6.1.b).
- Securing sign-ins and preventing abuse: legitimate interest (article 6.1.f).
- Counting visits without cookies to improve the site: legitimate interest (article 6.1.f).
How long
- Account data: as long as the account exists. When you delete it, everything is erased at once (username, profile photo, profiles, crosshairs, stats, settings). You can also change or remove your photo and username at any time in “edit my profile”.
- Supabase technical logs: a short, limited period set by Supabase for the security of the service.
- Local data: until you erase it from your browser.
Who has access (processors)
- Supabase (Supabase Inc.): database, sign-in and profile photo storage. Data hosted in the European Union (Paris).
- Discord (Discord Inc.): only if you choose “continue with Discord”.
- Cloudflare (Cloudflare, Inc.): website hosting and cookie-free stats.
- jsDelivr: serves the sign-in module, loaded only when you sign in or are already signed in.
Some of these providers are based in the United States; transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. Each user can only read their own data: this is enforced by the database access rules (RLS).
Your rights
You have the right of access, rectification, erasure, portability, restriction and objection.
- Download your data: “download my data” button in my setup (JSON file).
- Delete your account and all its data: “delete my account” button in the same place. It is immediate and final.
- Correct: edit your profiles directly on the site.
You can also lodge a complaint with your data protection authority (in France, the CNIL: cnil.fr).
Cookies and local storage
AimPro sets no cookies. The site uses your browser's local storage to work (profiles, stats, and the sign-in session if you have an account). This storage is strictly necessary for the service you ask for, so it does not require consent.
Minors
Anyone can create an account. If you are under 15, talk to a parent before creating one.