Privacy policy

Personal data we collect

We collect the following types of personal data:

We do not intentionally collect sensitive personal data such as government identification numbers, financial information, or biometric data.

Account information

When you create an account, we collect:

• Email and username: For authentication and communication purposes.
• OAuth data: When you sign in using Discord or Steam, we receive your username, profile picture, and other publicly available information. Depending on the provider, we may or may not receive your email address.
• Password: Securely stored if you create an account with email.

Usage data

Information about how you use our platform:

• Interaction data: Games you view, links you click, and features you use.
• Session data: Login times, preferences, and settings.

Technical information

Data automatically collected when you use our Services:

• Log data: IP address, browser type and version, operating system, and timestamps.
• Device information: Device type, operating system, and browser settings.
• Cookies: We use cookies to maintain your session and remember preferences. You can control cookies through your browser settings, but disabling them may affect functionality.

Communication data

• Contact information: Email address, subject, and message content when you contact us.
• Support requests: Information you provide when requesting assistance.

How we use your data

We use personal data for the following purposes:

• Provide and maintain our Services: To enable your account, authenticate logins, and deliver platform features.
• Improve and develop our Services: To analyze usage patterns, add features, and enhance user experience.
• Communicate with you: To send important updates, respond to inquiries, and provide support.
• Analytics: To understand how our platform is used and make data-driven improvements using Vercel Analytics.
• Security and fraud prevention: To detect and prevent abuse, unauthorized access, and illegal activity.
• Legal compliance: To comply with applicable laws and protect rights and safety.

How we share your data

We do not sell your personal data. We may share certain information in the following circumstances:

• Service providers: We share data with trusted vendors who help us operate our platform (hosting, analytics, email services). These providers process data only according to our instructions and maintain strict confidentiality.
• OAuth providers: When you sign in using Discord or Steam, certain data is shared with those platforms as part of the authentication process.
• Legal requirements: We may disclose information if required by law, to comply with legal processes, protect our rights, prevent fraud, or ensure user safety.
• Business transfers: If we are involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

Data security and retention

We implement industry-standard technical, administrative, and organizational measures to protect your personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. You should also help protect your data by:

• Selecting and protecting a strong password
• Limiting access to your device and browser
• Signing out after accessing your account

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

We retain personal data about you for as long as you have an active account with us or as otherwise necessary to provide our Services. In some cases, we retain data for longer if required to comply with legal obligations, resolve disputes, or prevent fraud. If you request account deletion, your data will be removed from our active systems within 30 days, except where we must retain it for legal compliance.

Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access your data: Request a copy of the personal data we hold about you.
• Correct your data: Update or correct inaccurate information in your account.
• Delete your data: Request deletion of your account and associated data.
• Data portability: Receive your data in a structured, commonly used format.
• Restrict processing: Limit how we use your data in certain circumstances.
• Withdraw consent: Withdraw your consent at any time where we rely on consent to process your data.
• Object to processing: Object to certain types of data processing.
• Lodge a complaint: File a complaint with your local data protection authority.

To exercise these rights, contact us at contact@playtester.io. We may require you to verify your identity before processing your request to protect your data from unauthorized access.

Cookies and similar technologies

We use cookies and similar technologies to:

• Maintain your login session and remember your preferences
• Understand how you interact with our platform
• Analyze usage patterns and improve our Services
• Ensure security and prevent fraud

You can control cookies through your browser settings. Disabling cookies may affect certain features of our platform.

International data transfers

Playtester is operated by a team based in India, while our Services are hosted and processed through service providers located in the United States and other jurisdictions. If you do not reside in the United States, laws in the United States may differ from the laws where you reside. By using our Services, you acknowledge that your personal data will be transferred to, stored, and processed in the United States. We apply the protections described in this Privacy Policy regardless of where your data is processed.

Additional rights by jurisdiction

California residents: You have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know, delete, and opt out of the sale or sharing of personal data. We do not sell or share personal data for cross-context behavioral advertising. To exercise these rights, contact us at contact@playtester.io.

Nevada residents: You have the right to opt-out of the sale of certain personal data to third parties. We do not currently sell personal data. To exercise this right, contact us at contact@playtester.io with the subject line “Nevada Do Not Sell Request.”

Indian residents: You may have rights under the Digital Personal Data Protection Act, 2023.

Children’s privacy

Playtester is not intended for children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at contact@playtester.io, and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will notify you by updating the “Last updated” date at the top of this policy and, for significant changes, we may also notify you via email or a notice on our platform. Your continued use of our Services after changes are posted means you accept the updated policy.