Privacy

Introduction

GGM8 is a gaming matchmaking platform that helps players find teammates, compare play styles, post squad calls, chat, and form in-game partnerships. This Privacy Policy explains what personal data we process when you use GGM8 and how we protect it.

This policy applies to the GGM8 mobile application (Android and iOS), our website and API at ggm8.app, and related support channels. It should be read together with our Terms of Service.

GGM8 is operated by an individual freelance developer (sole operator), not a registered company or legal entity.

By creating an account you confirm that you have read and understood this policy and our Terms of Service.

Age & children's privacy (COPPA)

GGM8 is intended for users aged 16 and older. We do not knowingly collect personal information from children under 16.

If you are under the minimum age, do not use the Service or provide any personal data. If we learn that we have collected data from someone under the minimum age, we will delete the account and associated information promptly.

Parents or guardians who believe a child under the minimum age has provided information to GGM8 may contact us using the email below.

Data we collect

Account data: email address, display name, and password (stored in hashed form). If you sign in with Google, we receive your Google account identifier and verified email address from Google — we do not receive or store your Google password.

Profile data: bio, play schedule, play-style answers, archetype, nationality, languages, gender and generation labels you choose to provide, game library entries, profile photo (if you upload one), and presence status (Ready / Do not disturb).

Social links you add voluntarily (e.g. Discord, Steam).

Usage data: last activity and online presence timestamps, sync scores shown to others, LFG posts and requests (waiting room / accepted status), private and squad group chat messages, block/report records, and notification preferences.

Device and technical data: push notification tokens and device platform (iOS / Android) when you enable alerts; IP address processed for security (for example rate limiting and abuse prevention) and stored in an encrypted vault when you delete your account; limited server logs needed to operate and secure the Service.

Device permissions: if you upload a profile photo, the app may request access to your photo library. Push notifications require your device permission. You can change these permissions in your device settings at any time.

How we use your data

We use your data to operate matchmaking (Radar, Scout, Elite sync), display your public player profile to other members, deliver LFG and chat features, send in-app or push notifications you opted into, and maintain platform safety (blocking, reporting, moderation).

We do not sell your personal data to third parties. We do not show third-party advertising in the app.

We process personal data only where we have a lawful basis: (1) contract — to provide the Service you signed up for; (2) legitimate interests — to keep the platform secure, prevent abuse, and improve features, balanced against your rights; (3) consent — where you opt in (for example push notifications or optional profile fields); (4) legal obligation — where applicable law requires it.

Matchmaking, profile visibility & automated scores

When your status is Ready, other players may see your profile in Radar or Scout results according to sync rules and filters. Your LFG posts and accepted squad details are visible to participants in those flows.

When your status is Do not disturb, you are hidden from discovery feeds.

Sync percentages, archetypes, and squad-fit labels are calculated automatically from profile and library data you provide. They help you discover teammates and do not produce legal or similarly significant effects on their own.

Private messages, blocked-user lists, and report details are not shown to other members except as needed for moderation or where you choose to share content.

Messages, moderation & safety

Private messages and squad group chats (created when a Squad Call host accepts players) are stored so conversations can be delivered and abuse can be investigated. We may review reports and related content to enforce our Terms and keep members safe.

You can block players and report users, Squad Calls, or chats (DM and squad). When you report, we automatically store a snapshot of recent messages for moderation review.

Please do not share sensitive personal information in your bio, LFG posts, or chats (for example health data, religious beliefs, sexual orientation, or government ID numbers). GGM8 is not designed to process special-category data you choose to publish.

How we share information

With other members: information you place on your public profile, in LFG posts, or in chats you send is visible to the recipients or participants you interact with. Consider carefully what you share.

With service providers: we use trusted processors that help us run GGM8 — for example cloud hosting (EU-based infrastructure), push delivery through Expo Push Notifications, and Google Sign-In when you choose that login method. They process data only on our instructions and under appropriate contracts.

For legal and safety reasons: we may disclose information if reasonably necessary to comply with law, respond to valid legal requests, protect the safety of users, investigate abuse, or enforce our Terms.

Business transfers: if GGM8 is involved in a merger, acquisition, or sale of assets, personal data may transfer to the successor entity, subject to this policy or a successor policy with notice where required by law.

We do not sell your personal data and we do not share it for cross-context behavioral advertising.

International data transfers

GGM8 is operated from the European Union. Your data may be processed on servers in the EU and, where necessary to deliver push notifications or authentication, by providers that operate globally (for example Google or Expo).

If personal data is transferred outside the European Economic Area (EEA), the United Kingdom, or Switzerland, we use appropriate safeguards where required by law, such as Standard Contractual Clauses or equivalent mechanisms.

Data retention

We keep account and profile data while your account is active.

You can delete your account at any time from Profile → settings menu (⋯) → Delete account. Enter your password to confirm permanent deletion (Google-only accounts may delete without a password). Your account disappears from Radar and LFG immediately; your profile is anonymized as "Deleted player". Identifiers (email, Google ID, IP at deletion) are kept in an encrypted vault for safety and re-registration prevention until the quarantine period ends.

Squad group chats remain in archive (read-only) after the related Squad Call expires. After account deletion, message text may remain in chats until a quarantine period ends (typically ~60 days), unless an open report requires longer retention.

Some records may be retained where required by law or for legitimate safety purposes (for example moderation reports or blocked re-registration during the vault period).

Your rights

Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal data, and to withdraw consent where processing is consent-based.

You can download a copy of your account data in JSON format from Profile → Export my data (limited to a few requests per hour). You can delete your account in Profile settings. To exercise other rights, contact us at the address below. We will respond within a reasonable time.

Device permissions: you can allow or deny photo-library and notification access in your device settings. Denying permissions may limit related features.

Uninstalling the app from your device does not delete your account. Use Delete account in Profile settings to close your account permanently.

California privacy rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) may provide you with additional rights regarding your personal information.

Categories we collect (in the last 12 months) may include: identifiers (email, display name, Google account ID if used), profile and preference data you provide, commercial information (in-app purchases if any), internet or app activity (usage, sync interactions), and communications (messages, reports). We use these categories as described in this policy to operate matchmaking, chat, LFG, safety, and notifications.

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We do not use sensitive personal information for purposes that require a "limit use" right under CPRA.

Your California rights may include: (1) right to know what personal information we collect, use, and disclose; (2) right to delete personal information we hold about you (subject to exceptions); (3) right to correct inaccurate personal information; (4) right to opt out of sale/sharing (not applicable — we do not sell); (5) right to non-discrimination for exercising your rights.

To submit a verifiable request, email us from the address linked to your account or provide information we need to verify your identity. You may designate an authorized agent where permitted by law. We aim to respond within the timeframes required by California law.

European privacy rights (GDPR / UK GDPR)

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and similar local laws may apply to our processing of your personal data.

The individual developer operating GGM8 acts as the data controller for personal data described in this policy. There is no separate company or DPO — contact the operator at the email below for privacy requests.

We process personal data on the legal bases described in the "How we use your data" section of this policy.

Sync percentages, archetypes, and squad-fit labels are generated by automated processing based on profile and activity data you provide. These features help you discover teammates; they do not produce legal or similarly significant effects on their own.

Your GDPR rights may include: (1) access to your personal data; (2) rectification of inaccurate data; (3) erasure ("right to be forgotten") in certain cases; (4) restriction of processing; (5) data portability for data you provided in a structured, commonly used format; (6) objection to processing based on legitimate interests; (7) withdrawal of consent at any time where processing is consent-based (without affecting prior lawful processing).

You can export your data in the app (Profile → Export my data) and delete your account in Profile settings. For other requests, email us from the address linked to your account. We will respond within one month where GDPR requires, or explain if an extension applies.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing violates applicable law.

See the "International data transfers" section for how we protect data transferred outside the EEA/UK.

Security

We use industry-standard measures including encrypted transport (HTTPS), hashed passwords, and access controls on our servers.

No online service can guarantee absolute security; please use a strong unique password and keep your login credentials private.

Changes

We may update this policy when features or legal requirements change. Material changes will be communicated in the app or by email where appropriate.

Continued use after an update means you accept the revised policy.

Version 1 — August 2026.