Privacy Policy

Information we collect

Depending on how you use the Services, we may collect:

• Account and contact information: your name, email address, password (stored hashed), company name and role, and billing details when you subscribe to a paid plan.
• Project and integration information: bundle identifiers, package names, platform settings, API keys and the configuration you create in the dashboard.
• Player data from your game: technical information such as device identifier, device type, operating system, app version, language, IP address and approximate country, plus a randomly generated identifier used to recognise a player, and the log records created when a purchase is verified.
• Purchase information: App Store receipts, Google Play purchase tokens, product identifiers and transaction status. We never receive full payment card numbers; payments are processed by the app stores.
• Optional player data: identifiers or metadata you choose to send, such as your own player ID, attribution data or custom attributes.
• Usage and device information: IP address, browser and device details, pages viewed, referring URLs and diagnostic data collected automatically through cookies and similar technologies.
• Support communications: messages you send to us, including any information you include in them.

How we collect information

• Directly from you, when you register, configure a project, subscribe to a plan or contact support.
• Automatically, through cookies and similar technologies when you browse the Site or use the dashboard.
• From your game, through the Open4ID SDK and server-to-server calls, when players play your game.
• From third parties such as the app stores and payment platforms we contact to verify purchases.

How and why we use information

• Provide, operate and maintain the Services, including player accounts, purchase verification and entitlement delivery.
• Keep verification logs and produce aggregated purchase and usage analytics for your dashboard.
• Authenticate users, prevent fraud and abuse, and keep the Services secure.
• Process subscriptions, invoices and payments for paid plans.
• Respond to support requests and communicate service updates.
• Monitor performance, troubleshoot issues and improve the Services.
• Send product and marketing communications where permitted; you can opt out at any time.
• Comply with legal obligations and enforce our agreements.

Where required by law, we rely on your consent. Otherwise we process personal information to perform our contract with you, to comply with legal obligations, or based on our legitimate interests in operating and improving the Services. You may withdraw consent at any time.

Player data and our role

When a game built with Open4ID processes player data, the game studio is the data controller and Open4ID acts as a data processor. We process that data only to provide the Services to the studio and in line with our agreement with it.

Open4ID acts as a bridge: we forward the store receipt or purchase token to Apple or Google, return the resulting entitlement, and keep the logs and aggregated metrics. We do not process card payments, hold funds or act as merchant of record.

We do not sell player data, use it for advertising, or build profiles of players for our own purposes. If you are a player and want to access, correct or delete your data, please contact the studio that publishes the game. We support studios in fulfilling those requests.

Studios that need a data processing agreement can contact us at the address below.

How we share information

We do not sell personal information. We share it only as needed:

• Service providers that host our infrastructure, send email, provide logging and monitoring, or bill Open4ID plans, under contracts that limit their use of the data. Player purchases are processed by the app stores, not by us.
• Apple and Google, when we verify purchases or restore transactions.
• Professional advisers and authorities, where required by law or to protect our rights, users or the public.
• A successor entity in the event of a merger, acquisition or sale of assets, subject to this Policy.

Aggregated or de-identified information that cannot reasonably identify a person may be shared for analytics or product improvement.

Cookies and similar technologies

We use browser storage to keep you signed in and to remember your language preference. We do not currently use analytics or advertising cookies. If we introduce them, we will update this Policy and ask for consent where required.

You can control or delete cookies in your browser settings. Blocking strictly necessary cookies may prevent parts of the Site or the dashboard from working.

Cross-border data transfers

Our infrastructure and service providers may be located in countries other than yours. Where we transfer personal information internationally, we use appropriate safeguards, such as standard contractual clauses, and require recipients to protect it consistently with this Policy.

Security

We protect data in transit with TLS, encrypt data at rest, restrict access to authorised personnel, and monitor our systems for abuse. No method of transmission or storage is completely secure; if you believe your account has been compromised, contact us immediately.

Retention

We keep account and project data for as long as your account exists and for a reasonable period afterwards to meet legal, tax and accounting obligations and to resolve disputes. Player data is retained according to our agreement with the studio. We may keep aggregated information for longer.

Children

The Site and Services are intended for game developers and are not directed to children. We do not knowingly collect personal information from children through the Site. Player data is handled under the studio's privacy policy and applicable law, including age-appropriate consent requirements.

Your rights and choices

Depending on where you live, you may have some or all of the following rights:

• The right to be informed about how your personal information is collected and used.
• The right to access and receive a copy of your personal information.
• The right to correct inaccurate personal information.
• The right to delete your personal information, subject to legal exceptions.
• The right to data portability — to receive your data in a structured, commonly used, machine-readable format.
• The right to restrict or object to certain processing.
• The right to withdraw consent at any time.
• The right to lodge a complaint with a supervisory authority.
• The right not to be discriminated against for exercising your privacy rights.

To exercise these rights, email us at the address below. We may need to verify your identity before responding. If your request concerns player data processed for a studio, please contact that studio first.

Changes to this Policy

We may update this Policy from time to time. When we do, we will change the date at the top of this page and, for significant changes, notify account holders by email or in the dashboard. Continued use of the Services after an update means you accept the revised Policy.

Contact us

Questions, requests or complaints about this Policy or your personal information can be sent to: [email protected]