Privacy
Your data, clearly explained
What UCM stores, why it is needed and what you can ask us to change or erase.
The short version
UCM collects only the information required to run your account and the game. We do not currently use advertising or analytics cookies, and we do not sell personal data.
Last updated: September 10, 2026
Account abuse prevention
To protect fair play, UCM processes signed-in accounts’ IP addresses and relevant game activity under its legitimate interest in preventing abuse. Detailed IP addresses, including the last login IP, are kept for at most 90 days after observation; IP history is encrypted. A dated link between two accounts may be kept for up to 12 months, without an IP address or signature, to review abuse spread over time. Moderation evidence and notes expire 90 days after the last relevant event. Access is restricted to administrators; a shared connection does not prove cheating and no sanction is automatic. Deleting an account removes its observations and associated cases. To detect repeated transitions between accounts, authenticated page-visit times are grouped by minute and retained for 14 days, without page URLs or content. Examples retained in a case follow the retention period for moderation evidence. During a manual review, an administrator may look up the network and hostname associated with an IP through RIPEstat (RIPE NCC). Only the inspected IP is sent to this service, without the manager name or browser fingerprint; results are cached for 24 hours.
UCM uses a browser-specific reference and technical characteristics to prevent account abuse. The reference is stored in the browser for up to 90 days; server observations expire after 90 days. Compared information includes browser, system, screen resolution, language, time zone, reported capabilities and Canvas/WebGL rendering signatures. Characteristics are encrypted at rest and accessible only to administrators. These data are pseudonymous, not anonymous, and are not shared with a fingerprinting provider. Deleting the account erases its observations. No match triggers automatic sanctions. Pixel density, which may include zoom, is also recorded.
Who controls the data?
Ultimate Cycling Manager is operated by Max, France. Privacy requests can be sent to contact@ucmgame.com. Hosting is provided by Hetzner.
Data we process
We store account identifiers (email and manager name), a Google identifier only when Google sign-in is used, game data (team, riders, races, messages and market actions), your language, the acquisition source recorded at sign-up, the last login IP used for security and fair-play checks and, if you choose to provide it, your reason for leaving.
Why we use it
This information lets us authenticate your account, operate the persistent game, secure player actions, prevent abuse, provide support and comply with legal obligations.
Cookies
Necessary first-party cookies keep your session secure, protect forms and remember your language. No consent banner is displayed because no optional cookies are used. If that changes, optional tracking will require your consent.
Visibility and sharing
Your manager name, team and game performances are visible to other players. Your email, login IP and authentication identifiers are not public. We share data only with technical providers needed to operate UCM or when legally required.
Retention and deletion
Account and game data are kept while your account is active. On deletion, login credentials are disabled and the last IP and acquisition data are erased. A copy of your email, linked to your former account and team, is kept separately for 30 days to identify abusive re-registrations, based on our legitimate interest in protecting the game. If you provide an optional reason for leaving, it is encrypted and kept in the same record for 30 days to help improve the game. Access is restricted to administrators, the email is not used to contact you, and the entire record is then deleted automatically. Your former team remains in historical results. Older backup copies expire through backup rotation; any restore must reapply deletions and expiry dates.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or objection, and data portability where relevant. You may also contact the French data protection authority (CNIL).
Contact
For any privacy request, write to contact@ucmgame.com from the email address linked to your account so we can verify your identity.