Privacy policy
Datenschutzerklärung · last updated 22 September 2026
Who is responsible
Folgmann Studios, Yannik Folgmann, c/o IP-Management #11555, Ludwig-Erhard-Str. 18, 20459 Hamburg, Germany. E-mail [email protected]. Full details are in the legal notice.
R6 Ultimate Team is free and non-commercial. There are no ads, no analytics, no tracking and no payments. We only process what the game needs to work.
Hosting and delivery
The site runs on a server rented from dataforest GmbH in Frankfurt am Main, Germany, which processes data on our behalf. All traffic passes through Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which protects the site against attacks and delivers it quickly. For this, Cloudflare processes your IP address and technical request data. Cloudflare is certified under the EU-U.S. Data Privacy Framework, which is the basis for the transfer to the USA (Art. 45 GDPR).
Legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR). Our web server does not keep access logs. Application error logs contain no IP addresses and are overwritten automatically after a short time.
Player photos and team logos originally come from Ubisoft, and flags from flagcdn.com. We deliver all of them through our own domain, so your browser does not connect to those services. Fonts are served from our own server too.
Signing in
You sign in with Google (Google Ireland Limited), Twitch (Twitch Interactive, Inc., USA) or Discord (Discord Inc., USA). You are sent to the provider, sign in there and come back. We then receive and store your account ID at that provider, your name, e-mail address and profile picture link as the provider shares them, and the sign-in tokens the provider issues. We use this only to create your account and sign you in. The providers process your data under their own privacy policies.
Legal basis is the use of the game you asked for (Art. 6(1)(b) GDPR).
Cookies and local storage
We only use what is technically necessary, so no consent banner is needed (§ 25(2) no. 2 TDDDG):
- authjs.session-token keeps you signed in, for up to 30 days.
- authjs.csrf-token and authjs.callback-url protect and complete the sign-in.
- r6ut-club remembers which of your clubs is active, for up to one year.
- r6ut-explain in your browser's local storage remembers whether the Explain tips are on.
Your game data
We store what you do in the game: your club name, favourite team, cards, squad, game plan, coins and their history, packs, matches, evolutions, transfer market listings and bids, your friend code, friends, shared club memberships, your daily reward streak and your Season Pass progress.
Other players see your club name, badge and squad (for example in friendlies), your market listings, results in friendlies against them and your club's place in the rankings. Members of a shared club see the names of each member's own club and the club's activity.
Legal basis is the use of the game (Art. 6(1)(b) GDPR). We keep this data as long as your account exists.
Data about professional players
The cards show professional Rainbow Six players and coaches: handles, photos, teams, nationality, roles, match stats and career prize money. This comes from public sources, the official Ubisoft Esports site and Liquipedia. We use it for the game based on our legitimate interest (Art. 6(1)(f) GDPR) and with the permission of the players and teams. If you are a player and want something changed or removed, e-mail us.
Your rights
You can ask for access to your data (Art. 15 GDPR), correction (Art. 16), deletion (Art. 17), restriction (Art. 18) and a copy in a portable format (Art. 20), and you can object to processing based on legitimate interest (Art. 21). To delete your account or use any of these rights, e-mail [email protected].
You can also complain to a data protection authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Str. 22, 20459 Hamburg.