Gamers Lab is operated by [FULL LEGAL ENTITY NAME], located in [JURISDICTION] (“Gamers Lab,” “we,” or “us”). This policy explains how we handle personal information about clients, prospective clients, and their authorized team members when they visit gamerslab.gg, use our client accounts and analytics tools, connect a game or data source, or contact us. These activities and related services are referred to below as the “Services.” This is a client-facing policy; it does not cover direct end-player accounts or player-facing services.
Personal information includes information that identifies someone directly or can reasonably be linked to them. Player IDs, online identifiers, and gameplay records can be personal information even when they do not contain a real name.
1 Our role and the information this policy covers
Information about client users. We decide how to handle information used to manage our website, customer relationships, client and team accounts, billing, and communications. This policy explains those practices.
Information handled for studios. Game developers, publishers, and other customers connect information to Gamers Lab so we can provide analytics and related tools (“Customer Data”). Where we handle personal information on a customer’s behalf, we act under its instructions and our agreement with it, including any data processing agreement. The customer determines why it collects that information and how it uses the results.
Clients are responsible for their own privacy notices and the permissions required to collect and connect game data. We assist clients with requests concerning personal information in Customer Data as required by our agreements and applicable law.
Our customer agreements set out additional restrictions and responsibilities for Customer Data. Neither those agreements nor this policy remove rights you have under applicable law.
2 Information we receive
The information we receive depends on the features you use and the data a customer chooses to connect.
- Account and business details: name, email address, company, account identifiers, workspace membership, permissions, and preferences.
- Communications and submitted content: demo requests, support messages, uploaded materials, prompts, feedback, and the responses generated within the Services.
- Billing records: billing contact details, subscription information, invoices, and payment status. [IDENTIFY PAYMENT PROVIDER AND CONFIRM WHETHER GAMERS LAB RECEIVES OR STORES PAYMENT CARD DETAILS.]
- Technical and usage records: IP address, browser and device characteristics, timestamps, pages and features used, session information, error reports, and security logs, to the extent collected by our systems.
- Connected game data: player and session identifiers, gameplay events, progression, retention, device or platform information, game economy activity, purchases, and experiment or configuration assignments. Where a customer connects real-money gaming data, this may include transaction amounts, deposits, withdrawals, wagers, and outcomes. Actual fields depend on the integration.
We receive information from you, your organization, connected identity providers, and the games, SDKs, APIs, databases, or analytics systems a customer authorizes. Customers should limit submissions to information needed for the agreed service and avoid unnecessary sensitive information.
3 How we use information
We use account, business, and technical information to establish and authenticate accounts, manage permissions, deliver subscriptions, handle billing, respond to requests, troubleshoot problems, and identify unauthorized access or misuse. We use product usage and feedback to identify usability problems, evaluate feature performance, and plan improvements.
For customers, we process connected data to calculate metrics, explain gameplay patterns, answer questions, generate reports and recommendations, monitor selected events, and operate the experiments, configurations, alerts, and integrations they enable. Customer Data is handled within the purposes and permissions set out in the applicable customer agreement.
We also use relevant records to meet legal requirements, resolve disputes, and protect the Services. We send product announcements or promotional messages where permitted and provide a way to unsubscribe. Essential account, security, and billing messages may continue after you unsubscribe from marketing.
Where consent is required, we obtain it for the relevant activity. This policy is a notice about our practices; it is not blanket consent to every possible use of your information.
4 AI features and model training
AI features may process your questions and the game data needed to answer them, including relevant event records or summaries. The resulting analysis may be made available to users with access to the relevant game or workspace. Depending on the feature, information may be processed by an external AI provider working for Gamers Lab.
[CONFIRM THE FOLLOWING PROPOSED COMMITMENT AGAINST BOTH GAMERS LAB PRACTICES AND PROVIDER CONTRACTS BEFORE PUBLISHING.]
We use Customer Data with AI to provide the customer’s requested features. We do not use identifiable player data or confidential Customer Data to train models shared across customers, and we do not permit our AI providers to use that information to train their general-purpose models. Any separate training use requires an appropriate agreement, a lawful basis, and additional notice or consent where required.
[INSERT AI PROVIDERS, CATEGORIES OF DATA SENT, AND RELEVANT PROVIDER RETENTION OR HUMAN REVIEW ARRANGEMENTS, OR LINK TO AN ACCURATE PROVIDER DISCLOSURE.]
AI outputs can include inferences about behavior, spending, or engagement. Customers determine how to use these outputs in their games and operations. [CONFIRM WHETHER ANY ENABLED FEATURE AUTOMATICALLY AFFECTS PLAYER ACCESS, PRICING, ELIGIBILITY, OR OTHER SIGNIFICANT OUTCOMES; DESCRIBE THAT PROCESS AND AVAILABLE REVIEW RIGHTS IF APPLICABLE.]
5 Aggregated information and research
[PROPOSED OPTIONAL PROVISION — RETAIN ONLY IF THIS USE IS IMPLEMENTED AND AUTHORIZED IN CUSTOMER AGREEMENTS.]
Where permitted by our customer agreements and applicable law, we may create aggregated statistics or information that has been anonymized so individuals cannot reasonably be identified. We may use these results to understand game trends, build benchmarks, evaluate our methods, and develop analytics products.
Removing names or replacing player IDs alone does not establish that information is anonymous. If information remains reasonably linkable to an individual, we continue to treat it as personal information.
We do not disclose identifiable player records or a customer’s confidential game-level information through these activities. We assess outputs before external disclosure and apply measures to reduce identification risks, including risks from small groups or combining datasets.
[IF ENTERPRISE DATA PRODUCTS OR EXTERNAL LICENSING ARE PART OF LAUNCH, SPECIFY THE OUTPUTS, RECIPIENT CATEGORIES, PURPOSES, CUSTOMER AUTHORIZATION, AND REIDENTIFICATION RESTRICTIONS HERE. THIS DRAFT DOES NOT GRANT A GENERAL RIGHT TO LICENSE CUSTOMER DATA.]
6 Who can receive information
Information may be available to:
- Authorized account users: colleagues, workspace administrators, and other people your organization authorizes, according to their permissions. Administrators may manage your access and view activity associated with your organizational account.
- Providers supporting the Services: companies providing hosting, data storage, authentication, payment processing, support, communications, monitoring, and AI processing. [CONFIRM CONTRACTUAL RESTRICTIONS ON PURPOSE, CONFIDENTIALITY, SECURITY, AND SUBPROCESSING; ADD A CURRENT PROVIDER LIST OR LINK.]
- Customer-selected destinations: applications, agents, warehouses, or other services that an authorized user connects or instructs us to send information to.
- Legal or transaction recipients: authorities or other parties where disclosure is required by law or justified to protect legal rights or safety, and advisers or prospective successors involved in a financing, acquisition, or similar transaction, subject to appropriate protections.
- Other recipients you authorize: where you direct us to disclose information or provide the necessary consent.
[PROPOSED COMMITMENT — CONFIRM AGAINST WEBSITE TRACKERS, PARTNERSHIPS, AND DATA PRODUCTS: We do not sell personal information or disclose it for cross-context behavioral advertising.]
7 Cookies and connected services
We use [CONFIRMED COOKIES OR SIMILAR TECHNOLOGIES] for [ACTUAL PURPOSES, SUCH AS SIGN-IN, SECURITY, PREFERENCES, OR ANALYTICS]. Details about providers, duration, and available choices are provided at [COOKIE NOTICE OR SETTINGS LOCATION].
[CONFIRM IMPLEMENTATION BEFORE PUBLICATION: Where prior consent is required, optional tracking technologies remain disabled until you choose to enable them. You can revisit that choice through the cookie settings.]
You can also manage cookies through your browser, although blocking essential cookies may prevent sign-in or other features from working.
When you choose to connect another service, its handling of information under its own control is described in its privacy notice. Disconnecting an integration stops future access through that connection, subject to the integration’s behavior; it does not automatically erase data already imported. You can request deletion as described below.
8 Storage locations and safeguards
Information is processed in [CONFIRMED HOSTING AND SUPPORT COUNTRIES], including locations used by our service providers. Information processed abroad may be subject to the laws and lawful access powers of those countries. Where applicable law requires safeguards for international transfers, we use [CONFIRMED TRANSFER MECHANISM]. Contact us for details about the safeguards applicable to your information.
We apply safeguards appropriate to the information and risks involved. [INSERT VERIFIED CONTROLS, SUCH AS ENCRYPTION IN TRANSIT AND AT REST, PERMISSION CONTROLS, AND ACCESS MONITORING. DO NOT CLAIM CERTIFICATIONS OR FEATURES THAT ARE NOT IN PLACE.]
No online service can guarantee complete security. We investigate security incidents and provide notifications where required by applicable law and our customer agreements.
9 How long we keep information
We keep personal information for the purposes described in this policy, taking account of account status, customer instructions, legal requirements, and the need to investigate security issues or resolve disputes.
- Account records: [RETENTION PERIOD OR SPECIFIC DELETION CRITERIA].
- Customer game data and AI interaction records: [DEFAULT RETENTION AND CUSTOMER CONTROLS], subject to the customer agreement.
- Website analytics and security logs: [RETENTION PERIODS].
- Billing and transaction records: [APPLICABLE RECORDKEEPING PERIOD].
- Backups: [DELETION OR OVERWRITE SCHEDULE AND HOW DELETED DATA IS HANDLED IF A BACKUP IS RESTORED].
At the end of the applicable period, we delete information or anonymize it where permitted. Specific records may be retained longer when a legal requirement, investigation, or dispute makes that necessary. Closing an individual team member’s account does not by itself delete the organization’s Customer Data, which is handled under the customer agreement.
10 Your choices and requests
Depending on applicable law, you may be entitled to access your personal information, correct inaccurate information, request deletion or a portable copy, object to or restrict certain processing, or withdraw consent. These rights can have legal exceptions. Withdrawing consent does not invalidate processing already carried out lawfully, and some requested services may no longer be available if necessary processing stops.
Send requests or privacy complaints to [PRIVACY CONTACT EMAIL]. We may ask for information reasonably needed to verify your identity or authority, and we respond within the time required by applicable law. If we cannot fulfill a request, we explain the reason and any available review or appeal process. You may also complain to the privacy regulator responsible for your jurisdiction.
Authorized client representatives can contact us about requests involving Customer Data under the applicable customer agreement. Requests concerning your own client or team account can be sent directly to the privacy contact above.
You can unsubscribe from marketing using the link in a message or by contacting us.
11 Updates and contact
We may revise this policy as our Services or practices change. The effective date identifies the current version. We provide additional notice of material changes and obtain any consent required before using information for a new purpose.
For questions, requests, or complaints, contact:
Privacy Officer
[FULL LEGAL ENTITY NAME], operating as Gamers Lab
[BUSINESS MAILING ADDRESS]
[PRIVACY CONTACT EMAIL]