Privacy policy

Last updated 20 September 2026

Summary, for convenience only and not forming part of this policy: we process an email address, a handle and the content you submit, for the purposes of operating the Service, analysing its use and publishing the results of that analysis. No third-party analytics or advertising technologies are used. Erasure of personal data and removal of a game listing may be obtained as set out under section 6. In the event of any inconsistency, the provisions below prevail.

1. Controller and scope

This policy describes the processing of personal data carried out by the operator of playtestyour.games (the "controller", "we", "us") in connection with the website, the API and the Playtest HUD desktop application (together, the "Service"). It should be read together with the terms of use.

2. Categories of data processed

  • Account data: email address, handle, display name, profile image where uploaded, and the user identifier supplied by a sign-in provider where Discord, Google or Reddit authentication is used. No password is stored; authentication is effected by one-time link sent by electronic mail or by a third-party provider.
  • Session data: a session record containing the originating IP address and browser user agent, retained so that an authenticated session may be validated and revoked.
  • Content data: reviews and their revision history, ratings, comments, responses, likes, tags, uploaded images, video clips and animated images, and the game listings you submit.
  • Ownership claim data: the evidence link or statement you provide and the verification code issued by us, retained for the purpose of assessing the claim.
  • API credentials: a cryptographic hash of each API key you create, together with the date of its most recent use. The key itself is not retained.
  • Correspondence: authentication messages sent to you by electronic mail.

Reviews, comments, handles and profile images are published by design and are accessible on game pages, on profile pages and through the API. Email addresses are not disclosed to other users.

3. Tracking technologies and data not collected

  • No third-party analytics, advertising pixels or cross-site tracking technologies are employed.
  • The only cookie set is the session cookie required for authentication. Your interface theme preference is stored in the local storage of your browser and is not transmitted to us.
  • Personal data is not sold, and is not disclosed to third parties for their own marketing purposes.
  • Session recordings made by the Application are written to your own device and are not transmitted to us. Only highlight clips attached to a review are uploaded.

4. Purposes and legal bases of processing

  • Provision of the Service: publishing your content, maintaining authenticated sessions, calculating scores, sending authentication messages and moderating submissions. Where the General Data Protection Regulation or equivalent legislation applies, the legal basis is performance of a contract with you.
  • Analytics: measurement of usage of the Service and of the behaviour of ratings, for the purpose of maintaining and improving it. Such analysis is performed on infrastructure under our control. The legal basis is our legitimate interests in operating and improving the Service.
  • Publication of analysis and promotional material: publication of statistics derived from reviews, listings and play sessions, and reproduction of publicly accessible content by way of excerpt or screenshot, in material concerning the Service. Aggregated statistics are retained indefinitely, including following erasure of the underlying content, and do not identify any individual. Excerpts are attributed to a handle, and you may require that a specified excerpt not be used in material published after the date of your request. The legal basis is our legitimate interests in promoting the Service.
  • Security and integrity: detection and prevention of abuse, unsolicited content and manipulation of ratings. The legal basis is our legitimate interests in protecting the Service and its users.

Where processing is carried out on the basis of legitimate interests, you have the right to object to it at any time, as described in section 6.

5. Recipients and disclosure

  • Electronic mail provider: processes your email address for the purpose of delivering authentication messages.
  • Hosting and database provider: stores the categories of data described in section 2.
  • Sign-in provider selected by you: Discord, Google or Reddit, which discloses your identifier to us upon authentication. Processing by that provider is governed by its own policy.
  • The public: in respect of data published by design, namely your handle, profile image, reviews, comments and game listings.

Personal data may additionally be disclosed where required by law or by a competent authority. We will notify you of any such disclosure to the extent that we are permitted to do so.

6. Rights of the data subject

6.1 Rights. You have the right to obtain access to the personal data we hold concerning you, its rectification, its erasure, the restriction of its processing and its portability, and to object to processing carried out on the basis of legitimate interests. Requests may be submitted by electronic mail to [email protected].

6.2 Erasure of account data. Closure of an account erases the email address, handle, display name, profile image, session records and API credentials associated with it, together with the reviews, comments and uploaded files submitted from it. Retained thereafter are aggregated figures that do not identify you and data we are required to retain in order to comply with a legal obligation.

6.3 Removal of a game listing. Where you are the owner of a listed game, removal of the listing is undertaken upon verification of ownership, effected by an approved ownership claim submitted through the Service or by notice sent by electronic mail from an address published in connection with the game. Removal is effected within 7 days of verification and confirmed to you. The full undertaking, including its effect on reviews of the game, is set out in section 7 of the terms of use.

6.4 Response times. Requests are answered within 7 days where practicable, and in any event within one month of receipt. Identification will be requested only where we are unable to establish the identity of the requesting party by other means.

6.5 Supervisory authority. Data subjects in the United Kingdom or the European Union have the right to lodge a complaint with their supervisory authority. We invite you to contact us first so that the matter may be addressed directly.

7. Retention periods

  • Account data: until erasure of the account.
  • Content data: until removal by you or by us.
  • Session records: until expiry, or until the session is revoked by signing out.
  • Aggregated data derived from the categories above: retained indefinitely in a form that does not identify any individual.

8. Children

The Service is not directed to persons under 13 years of age and we do not knowingly process their personal data. Where we are notified at [email protected] that an account has been created by such a person, the account and the associated data will be erased.

9. Amendments

This policy may be amended from time to time. The date stated at the head of this page indicates the date of the current version. Amendments that materially affect the processing of personal data already collected will be notified on the Service before they take effect.