Privacy Policy

This policy explains how PlayRoam ("we") handles personal data when you use PlayRoam at https://staging.playroam.gg and the PlayRoam app. Contact us about privacy at support@playroam.gg.

Data we collect

Account. Your email address, your password as a one-way hash (we never store or see the password itself), your preferred language, and when you created the account, confirmed your email and last signed in.

Sessions. When you sign in we create a session. We store a hash of the session token, the time it was created and last used, and, for website sessions, your browser's user agent. App sessions are rotated regularly and limited to one per account.

Billing. Payments are handled by Paddle, our Merchant of Record. We receive and store your Paddle customer ID and the status, plan and renewal date of your subscription. Your card or payment details never reach us.

Support. If you email us, we keep the conversation to help you.

Security data. We process IP addresses in memory to limit repeated sign-in attempts and to protect the service. Our web server logs requests, including IP addresses, and keeps those logs for up to 30 days.

Analytics. We use Umami, a privacy-friendly analytics service that doesn't use cookies and doesn't track you across sites. It records aggregate information such as pages viewed, referring sites and button clicks, on our public pages only: sign-in, registration and account pages are never measured. Page addresses are recorded without query strings or fragments, and we honour your browser's Do Not Track setting. We don't send it your email address or account ID.

Cookies

We set two essential cookies when you sign in to the website: __Host-pr_session, which keeps you signed in, and __Host-pr_signed_in, which holds the part of your email address before the @ so our pages can show it in the account badge. Both are removed when you sign out. We also set pr_locale if you choose a language. We don't use advertising or tracking cookies.

Why we use your data

• To provide the service: your account, sign-in, subscription status and the app's license checks (performance of our contract with you).
• To keep the service secure and prevent abuse (our legitimate interest).
• To meet legal and tax obligations (Paddle keeps the transaction records required by law).
• To send you account emails such as email confirmation, password reset and important changes to the service. We don't send marketing emails without your consent.

Who processes data for us

• Paddle — checkout, payments, invoices, tax and refunds. Paddle acts as the seller of record; its own privacy notice applies to the data it collects at checkout.
• Email delivery provider — sends our account emails.
• Hosting provider — runs our servers and database.
• Umami — cookieless website analytics.

We don't sell personal data.

How long we keep it

We keep account data for as long as your account exists. When you ask us to delete your account, we delete it within 30 days, except records we must keep by law. Expired sessions and used email links are removed automatically.

Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, and object to or restrict some processing. Email support@playroam.gg from the address on your account. You can also complain to your local data protection authority.

Children

PlayRoam is not intended for children under 16, and we don't knowingly collect their data.

Changes

We'll post updates to this policy on this page and email you about significant changes.